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ABSTRACT 


Since 9/11, Arizona and federal law enforeement ageneies understand the need to 
improve subjeet identifieation eapabilities and integrate eriminal information aeross 
jurisdietions. Ageneies still eolleet information based on a subjeet’s name and 
demographics for identification. Using a subject’s name and demographies as keys to 
identifying information is a weakness. In 2012, Arizona will upgrade the state’s strategie 
plan to allow law enforeement offieers to use biometries teehnology to verily a subjeets’ 
identity at first point of eontact and implement information sharing eapability aeross the 
state, border states, and federal ageneies. 

This thesis presents a teehnology framework for strategie planning that ineludes 
biometries identifieation teehnology, information sharing eapability, and a governanee 
strueture for oversight. Through researehing implementations in Los Angeles County, 
California and the states Minnesota, Wisconsin, and Vermont a eomparative analysis 
revealed similarities in eaeh implementation that will be used in developing an Arizona 
teehnology framework. 

Biometries identifieation and information sharing is eritieal for supporting 
seeurity along the U.S. border with Mexieo. This thesis addresses expansion of the 
teehnology framework to align with the FBI’s Repository for Individuals of Speeial 
Coneern, initiatives to gain aeeess to identification information from Central Ameriean 
eountries and programs developed during the border governors’ eonferences with 
Mexieo. 
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I. INTRODUCTION 

A. PROBLEM STATEMENT 

1. Status Quo 

Law enforcement agencies are the United States’ front line of defense for 
protecting citizens against terrorism and crime. Officers make contact with the public 
every day, analyzing situations and gathering subject information. The common practice 
for officers is to collect information based on a subject’s name and demographic 
characteristics such as age, height, weight, hair color, eye color, and any physical body 
markings. Using a subject’s name and demographics as keys to identifying information 
is a weakness for automating information sharing. A name can be recorded and spelled 
many different ways and demographic information, such as age, height, and weight are 
subject to change over time. 

Law enforcement agencies primarily rely on state drivers’ licenses to verify 
subjects’ identities. However, drivers’ licenses can be forged and hard to verify across 
state lines. In many cases, officers rely on other forms of identification where the 
subjects’ name may vary or in the worst case, officers rely on the subjects’ verbal 
information. In addition, using subjects’ demographic characteristics is subject to 
interpretation by an officer and varies each time a subject has been contacted. 

Historical records are hard to change. A subject can legally change a name and 
no action is taken to change any information stored in law enforcement record systems. 
Also, when a subject is booked into jail, a fingerprint identification check against both the 
state and Federal Bureau of Investigation (FBI) identification systems may reveal a 
different name. Going back and correcting the initial information captured by the law 
enforcement agency may not occur. 

Even with the advancements in using automation to store information, agencies 
still use the same subject identification techniques. Law enforcement agencies rely on 


1 



manual efforts such as phone calls and faxed pictures to make positive identification. In 
addition, courts, prosecutors and other criminal justice agencies follow the same process 
as law enforcement agencies to verify subject information. 

In 2004, there were more than 17,000 law enforcement agencies with greater than 
800,000 full-time sworn law enforcement officers in the United States (National Law, 
n.d.). Technology exists today that will provide law enforcement agencies global access 
to very detailed information in a secured environment. Massive amounts of information 
will be made available that will cross technology boundaries. Nevertheless, without a 
common standard for subject identification, law enforcement agencies will be forced to 
rely on the same manual techniques they use today. 

2. Problem Statement 

Information sharing is expanding in Arizona. Nevertheless, a technology 
framework for implementing identification technology, information sharing, and 
alignmenti with federal, state, and local law enforcement systems have not been 
addressed. Further work needs to be done in these areas in order to improve information 
sharing and law enforcement decision making. 

B. RESEARCH QUESTION 

How does Arizona develop a technology framework that aligns with federal, state, 
and local law enforcement identification systems in order to improve decision making 
and support information sharing? 

C. ARGUMENT: MAIN CLAIMS, WARRANTS, EVIDENCE AND 

CHALLENGES 

The Arizona Strategic Plan identified the need to improve subject identification, 
implement an information sharing environment, and align with state, local and federal 
law enforcement agencies (ACJC, 2008). Agencies have started initiatives for evaluating 

1 For purposes of this thesis, alignment is defined as subjeet identifieation and law enforeement 
information sharing. 
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identification technologies independently of any information sharing plan. For example, 
the AZLink program provides tools used by Arizona law enforcement to share 
information. The program is being implemented without considering the expansion of 
biometric identification technology. The complexity of the systems and the introduction 
of new technologies involved will create waste and make rework inevitable without a 
technology framework for integration. 

1. Arizona Identification Technologies 

Two identification technologies are becoming the standard within Arizona, the 
two-fingerprint system (2-FID) being implemented by the Department of Public Safety 
and the facial recognition system being implemented by the Arizona Counter Terrorism 
Information Center. Each system is being evaluated independently with no consideration 
for integrating subject identification capabilities and storing accurate subject information 
within law enforcement records. A possible solution for Arizona is to create a multi¬ 
modal identification capability for each subject record as part of the Arizona Strategic 
Plan. In addition, the multi-modal systems will be expanded to use mobile wireless 
identification technologies by officers in the field. The challenge is to implement multi¬ 
modal identification capability into disparate local law enforcement record management 
systems and the central identification database maintained by the Department of Public 
Safety. 


2. Arizona Information Sharing 

The AZLink program provides the next step as part of the technology framework. 
The program’s objective is to provide information sharing across disparate systems. The 
program depends on the information provide by local law enforcement record 
management systems. The challenge will be to upgrade the AZLink system to take 
advantage of multi-modal biometric identification technology provided by the local 
agencies. 
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3. 


Arizona Law Enforcement Information Systems Governance 


A governance team that includes state, local, and federal agencies will need to be 
established to provide oversight and direction to both the Arizona Department of Public 
Safety for subject identification systems and the Arizona Criminal Justice Commission 
(ACJC) for criminal justice information sharing systems. The challenge will be to 
establish an organizational structure for governance, develop oversight responsibilities, 
and coordinate efforts with policy and technical teams. 

4. Summary 

This thesis will draw upon the successes of other states that have developed 
technology frameworks that include biometric identification systems, law enforcement 
information sharing systems, and have established a successful governance structures. 

D. SIGNIFICANCE OF RESEARCH 

The research for this thesis will serve to build a technology framework that will 
provide a common approach for integrating subject biometric identification capability 
into an information sharing environment. The objective of the framework will be to 
support three strategic trusts established by thQ Arizona Strategic Plan: 

1. Implement a rapid identification capability to track information across 

systems 

2. Provide visibility to criminal justice information across jurisdictional 
boundaries. 

3. Extend federal initiatives for statewide records improvement and 
information Sharing. (ACJC, 2008, p. 14) 

The research will also fill the gap between actual state implementations and 
literature information available on law enforcement biometric solutions and the 
integration of those solutions into an information sharing environment between state, 
local, and federal law enforcement agencies. 
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The research will serve as a starting point for future research efforts in the areas 
of public acceptance of biometric identification by field officers. In addition, further 
research will be needed in the areas of information security for mobile identification 
systems and data security for law enforcement information sharing systems. 

This thesis will serve to renew the relationships between state, local and federal 
law enforcement agencies for collaborative information sharing. The consumers of this 
research will be Arizona law enforcement agencies, other state agencies, and agencies 
within the U.S. Department of Justice and the U.S. Department of Homeland Security. 
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II. LITERATURE REVIEW 


A. HIGH LEVEL SUMMARY 

Arizona law enforcement agencies are planning to implement new identification 
technologies that will improve decision making and support information sharing for state, 
local, and federal agencies. Developing a technology framework involves the creation of 
a strategic plan, the selection of identification technologies, and implementation of an 
integrated information sharing environment. 

This literature review was conducted to better understand what has been 
accomplished in each of these areas and explore what remains to be done in terms of 
creating an identification system for the state of Arizona. The following topical areas 
were explored. 

• The Arizona Integrated Criminal Justice Information System Strategic 
Plan. 

• Arizona identification technologies used by law enforcement agencies. 

• Arizona law enforcement information sharing. 

Alignment with the federal and state information sharing systems. 

B. ARIZONA INTEGRATED CRIMINAL JUSTICE INFORMATION 

SYSTEM STRATEGIC PLAN 

In 2008, Arizona published the Arizona Integrated Criminal Justice Information 
System Strategic Plan (ACJC, 2008) for improving law enforcement subject 
identification capability and implementing the capability for information sharing across 
jurisdictions. The following three strategic thrusts are part of the plan: 

1. Implement a rapid identification capability to track information across 
systems; 

2. Provide visibility to criminal justice information across jurisdictional 
boundaries; and 
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3. Extend federal initiatives for statewide records improvement and 

information sharing. (ACJC, 2008, p. 14) 

In addition, three key goals are identified as part of the implementation of a rapid 
identification capability: 

1. Utilize unique identification to link non-arrest events and formal arrest 
events with booking events; 

2. Provide the capability for law enforcement to establish positive 
identification of individuals at the earliest authorized point; and 

3. Provide unique identification for the exchange of justice information. 
(ACJC, 2008, p. 14) 

The Arizona Integrated Criminal Justice Information System Strategic Plan was 
approved by state law enforcement leaders as a common direction for improving 
technology and information sharing. However, the plan did not define a framework that 
specified what identification technologies would be adopted as a state standard or how 
information sharing would be accomplished. Arizona has several programs underway 
piloting biometric identification technologies and information sharing within state and 
local law enforcement agencies. 

C. STATE OF ARIZONA CRIMINAL JUSTICE GOVERNANCE 

The Arizona Integrated Criminal Justice Information System Strategic Plan 
included improvements to both subject identification and information sharing capability. 
Subject identification systems are managed Arizona Department of Public Safety, 
Records Identification Bureau. Both policy and technology support is the responsibility 
of the Department of Public Safety (Arizona Department of Public Safety, n.d.). 

The Arizona Criminal Justice Commission (ACJC) is authorized by state statutes 
to carry out various coordinating, monitoring and reporting functions. The Commission 
provides services for 480 criminal justice agencies (ACJC, n.d.). ACJC facilitates 
information sharing among statewide agencies by monitoring new and continuing 
legislation, researching and supporting criminal justice programs (ACJC, n.d.). 
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The Arizona Criminal Justice Commission oversees the AZLink program, the law 
enforcement information sharing system identified as part of the Arizona Integrated 
Criminal Justice Information System Strategic Plan. ACJC leads a consortium of 
regional law enforcement agencies that are responsible for establishing and implementing 
policies and technology for agencies within the state. ACJC is governed by an 
independent board of law enforcement leaders across the state. The board provides 
direction and support for all the ACJC programs (Arizona Integrated, n.d.). 

D. ARIZONA IDENTIFICATION TECHNOLOGIES 

Arizona law enforcement agencies have narrowed down the biometrics 
possibilities to fingerprint identification, facial recognition, and iris scanning. The 
introduction of one or more of these new technologies also introduces challenges in 
regards to public acceptance. Also, there is a growing concern that using multi-modaP 
biometric solutions within law enforcement will require additional federal and state 
policies. 

I. Fingerprint Technology 

Fingerprinting has been around longer than any other biometric identification 
system used in law enforcement. Standards have been developed for maintaining and 
securing information for fingerprinting that takes place at police department or jail 
facilities when a subject has been arrested. Policies and procedures have developed over 
time to address civil rights and privacy concerns.3 

Mobile fingerprint capability is relatively new within law enforcement. Handheld 
identification units can process one, two or more fingers either from the right hand, left 
hand, or both hands. Using Bluetooth communications, or a hard wired connection, the 


2 Multi-modal biometrics uses more than one form of biometric identification to improve accuracy. 

3 A privacy and civil liberties policy is a written, published statement that articulates the policy 
position of an organization on how it handles the personally identifiable information that it gathers and uses 
in the normal course of business. The policy should include information relating to the processes of 
information collection, analysis, maintenance, dissemination, access, expungement, and disposition 
(Department of Justice, 2008). 
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handheld devices can transfer fingerprint images to Personal Digital Assistant (PDA) and 
laptop. The PDA and laptop can also connect to the host server to process the image 
using wireless or cell phone connections. 

In addition, some manufacturers provide handheld units with the capability to use 
wireless technology to directly communicate with a hosting server. Several vendors offer 
the capability to download database files directly to the handheld units. This allows 
direct search from the device against a database without a need to transmit information. 
Most devices offer a qualification check against the fingerprint on the handheld units. 
This makes sure the fingerprint meets a quality check before the image is transmitted to 
be processed. Policies and procedures vary across states for mobile units used by officers 
in the field. 


a. Fingerprint Accuracy 

The National Institute of Standards and Technology (NIST) conducted an 
accuracy study to fulfill requirements of the USA PATRIOT Act and the Enhanced 
Border Security and Visa Entry Reform Act (Bulman, 2004). The test used operational 
fingerprints from a variety of U.S. and state government sources. The most accurate 
systems were from NEC of Japan, SAGEM of Erance and Cogent, an American company 
(Bulman, 2004). The performance of these three systems was comparable. The best 
system was accurate 98.6 percent of the time on single-finger tests, 99.6 percent of the 
time on two-finger tests, and 99.9 percent of the time for tests involving four or more 
fingers (Bulman, 2004). 

2. Facial Recognition Technology 

Eacial recognition systems use a standard camera to take a subject’s picture. An 
officer in the field takes a picture and then transfers the information to a computer by 
placing the camera into a docking station attached to a laptop in a patrol car or a docking 
station attached to a PC at a remote location. The image can also be transmitted using 
Bluetooth communications to the laptop in the patrol car. Eigure 1 illustrates how images 
are transmitted and information received by an officer in the field. 


10 




Image capture 

V J 



CI>PO/CDMA 

1XRTT 




Headquarters 


I 

Faaal reco9nition 
server 



Dffir»r ratiMvaft t1*mngr«phlc 

information for suspect 


Photo gallery 


Offloof idonlifiofi 
facial makiws 


Figure 1. Mobile identification system (From Viisage Technology, 2005) 

The image is then processed and sent to a central server to match against the 
image database. The system processes the image then returns one or more images back 
to the patrol car’s laptop. The officer can then compare the results against the 
demographics of the subject to make a positive identification (Viisage Technology, 
2005). Facial recognition can also be accomplished using a PDA to take a picture and 
then transmitting the image using Wi-Fi, Bluetooth, or cellular connections to a receiving 
facial recognition system. Facial recognition systems have drawn lots of attention in 
regards to privacy. 

Advocates believe the Fourth Amendment of the Constitution restricts law 
enforcement’s use of facial recognition systems. Law enforcement must have 
individualized, and reasonable suspicion of criminal activity before it can “search” 
someone’s face to see if it matches that of an individual in a database. In the United 
States V. Dionisio (1973) court case, the U.S. Supreme Court ruled that a person does not 
have reasonable expectation of privacy for physical characteristics exposed in public. 
Therefore, physical characteristics collected in public can be used for image searches. 
Supporters believe using cameras to capture videos or pictures in public does not violate 
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the Fourth Amendment (Darryl, 2007, pp. 50-51). The road ahead is unelear for 
balaneing the needs of citizen privacy rights against law enforcement’s need to identify 
subjects and use facial recognition as an investigative tool. 

a. Facial Recognition Accuracy 

The National Institute of Science Technology completed a facial 
recognition accuracy vendor test in 2006. The results showed a 10 fold improvement 
over comparable tests conducted four years prior (Dizard, 2007). The test results rated 
performance by algorithms from 14 organizations, including vendors and universities 
(Dizard, 2007). The NIST study found that under the tests’ conditions, the algorithms’ 
recognition performance was about the same for very-high resolution still face images, 
three-dimensional (3D) face images and single-iris images. Facial recognition systems 
have reduced their error rates from about 0.73 percent in a 1993 to 0.01 in 2006 (Dizard, 
2007). 


3. Iris Scan Technology 

Iris scanning systems can store iris image information on a handheld unit and then 
compare the image against a database residing on the device. The device can also be 
connected to a computer that can process the image against a database located on a 
remote computer. The computer can also transmit the image to a central server for 
processing. Identification analysis results can be returned to a computer or a handheld 
device to support decision making (L-1 Identity Solutions, n.d.). Therefore, the iris 
images can be processed against a database located on a handheld device, remote 
computer, or a central server. 

a. Iris Scan Technology Accuracy 

Iris scan accuracy is comparable to facial recognition. In 2006, the Iris 
Challenge Evaluation (ICE) was conducted by the National Institute of Standards and 
Technology. The test results indicated iris scans were more than 99 percent accurate 
(Newton & Phillips, 2006). 
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4. 


Multi-Biometric Identification Systems 


In 2003, NIST recommended using a dual approach that employs both fingerprint 
and facial recognition technology as the best option for a biometric system that would 
make the nation’s borders more secure. After studying biometric technologies, NIST, in 
conjunction with the Department of Justice, made the recommendation to use this multi¬ 
biometric combination in a system to Congress (Bulman, 2003). 

Iris scan technology is used within law enforcement as part of the arresting and 
inmate process for identification purposes. Civil rights and privacy policies are not a 
concern in these areas. Nevertheless, iris scanning devices used by field officers to 
validate identification prior to an arrest has not gained acceptance in the public’s view. 
The public is sensitive to this technology in that it is intrusive. Unlike facial recognition, 
iris scanning is similar to fingerprints. Each person has to submit to the biometric data 
capturing process (Iris Scan, n.d.). 

a. Current State Within Arizona 

Law enforcement agencies are evaluating a two-fingerprint rapid 
identification system provided by Sagem Morpho.'^ The system is being tested at the 
Phoenix, Mesa, and Glendale Police Departments. Currently, the only available 
biometrics data is for known criminals. The Department of Public Safety provides the 
standards and database technology for the law enforcement agencies. What remains to be 
done is to expand identification data collection, storage, and retrieval capabilities beyond 
that of known criminals within local law enforcement records systems and provide a 
secured environment for sharing information across agencies. 

Facial recognition technology is being used by the Arizona Counter 
Terrorism Information Center (Hermann, 2006). Use of the technology is very limited. 
What remains to be done is to determine how facial recognition will be integrated into the 
state’s strategic plan. 

^ Sagem Morpho provides biometric systems to federal and state law enforcement agencies across the 
U.S. For more information, see 

http://www.morpho.eom/MorphoTralCMorpho/Morpho_Prod/Crim_Just/rapID_1100.html. 
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Iris scanning is the least popular form of biometrie identification. 
Currently, it is only used to identify prisoners within the Maricopa County Jail system. 
There is no interest in expanding this capability. 

In addition to biometric identification, the Real-ID program introduced by 
the Real ID Act of 2005 has been evaluated by the Arizona governor and the state 
legislature. The program is considered a step in the right direction for improving the 
accuracy of drivers’ licenses; however, the program has not been adopted within Arizona. 

5. Real-ID Program Identification Technologies 

The Real ID program is a nationwide effort to improve the integrity and seeurity 
of state issued drivers’ lieenses and identification cards. The program calls for states to 
implement minimum standards for seeurity and integrity of state-issued drivers’ lieenses. 
Eaeh state must upgrade security features in each card, document and verify applieant’s 
identity, and ensure the applieant does not have multiple drivers’ licenses in other states 
(More Secure, 2009). The act mandated that states would need to comply by 2008. 
Nonetheless, many states are resisting implementing the federal Real-ID program based 
on eoncems about the high cost of implementation and the concern about citizen privaey 
(Williams, 2008). 

Along with states, many civil rights and privacy organizations are fighting 
implementing the REAL-ID program. The Eleetronic Privacy Information Center (EPIC) 
published an assessment of the REAL ID program in May 2008. Overall, the assessment 
recommends not adopting the program (Eleetronic Privacy, 2008). The assessment states 
the program increases the likelihood of uneontrolled linkage of records about people 
across government or government supported personal data systems (Electronie Privacy, 
2008). 


a. Current State Within Arizona 

Arizona House Bill 2426 prohibits Arizona from partieipating in the 
implementation an Enhanced Driver Lieensee (EDL) program reeommend in the REAL 

ID Act of 2005 (Arizona State Legislature, 2008). An EDL contains a Radio Erequency 
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Identification Chip (RFID). The RIFD can be scanned by a machine from two to 15 feet 
away (Arizona State Legislature, 2008). This capability would allow law enforcement 
officers to scan a driver’s license when stopped along side of the road or at the police 
station to facilitate identification verification. Privacy advocates have issues with vicinity 
scanning RFID technology and the possibility of identification theft (Arizona State 
Legislature, 2008). Arizona currently has no plans to implement the Real-ID program 
and is not considered within the technology framework to make such a program feasible. 
Further research will need to be done to determine if there are any acceptable conditions 
under which the Arizona State Legislature will change its view and adopt the program. 

6. Arizona Information Sharing 

With the acceptance of the strategic plan in 2008, the Arizona Criminal Justice 
Commission along with several law enforcement agencies began a program called 
AZlink. The program is currently developing the capability to align disparate law 
enforcement information systems to provide better continuity for law enforcement 
information sharing. AZLink uses Coplink as its foundation technology. Coplink 
provides a data warehouse capability for data collection and analysis. AZLink is 
developing four data center regions for consolidating law enforcement information. Each 
Coplink data center will be able to share information across Arizona, with the 
Department of Justice, and the Department of Homeland Security by 2010. By 2012, 
there will be 33 participating law enforcement agencies in Arizona.^ 

a. Current State Within Arizona 

Coplink includes fingerprint and facial recognition technology and 
receives its information from local law enforcement record systems. Currently, these law 
enforcement systems do not store any biometric subject identification information. What 
remains to be done is to provide the capability for local law enforcement systems to 


5 The AZLink plan is part of an Arizona Department of Homeland Seeurity Grant request submitted by 
B. Kalaf from the Arizona Criminal Justiee Commission and the Marieopa Count Sheriffs Offiee. Grant 
information ean be furnished upon request. 
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collect and store subject identification information. AZLink will also need to expand 
outside Arizona to share information with other states and federal systems. 

7. FBI’s Next Generation Identification Program 

The FBI has initiated the Next Generation Identification (NGI) program. The 
NGI system will offer state-of-the-art biometric identification services. The program is a 
multi-million dollar effort (Next Generation, n.d.). Within the NGI program, the FBI is 
creating a Repository for Individuals of Special Concern (RISC). The system will provide 
law enforcement agencies with rapid/mobile identification services to quickly assess the 
level of threat that an encountered individual poses. 

Currently RISC records include: 

• Wanted Persons 

• Sex Offender Registry Subjects 

• Known or Suspected Terrorists 

• (Next Generation, n.d.). 

The RISC system will accept both the two fingerprint (2-FID) and ten fingerprint 
(lO-Print) identifiers used in Arizona (Next Generation, n.d.). Combining the 2-FID 
system with the RISC rapid search capability will allow the appropriate authorities to 
search both the FBI and Arizona biometrics databases with a single request. Pilot state 
programs include the Ohio Bureau of Criminal Identification and Investigation, Florida 
Department of Law Enforcement, Texas Department of Public Safety, and the Minnesota 
Bureau of Criminal Apprehension (C. Rhoades, personal communication, February 19, 
2010 ). 


a. Current State Within Arizona 

Arizona’s strategic plan includes the integration with the federal 
identification systems and information sharing programs. What still needs to be done is 
integrate the state fingerprint system with the federal RISC system. Integration with the 


RISC system is not in the scope of this thesis. 
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E. SUMMARY 


In 2008, Arizona published the Arizona Integrated Criminal Justice Information 
System Strategic Plan that addressed improving law enforeement subjeet identifieation 
teehnology and establishing an information sharing eapability for state, loeal, and federal 
law enforeement ageneies (ACJC, 2008). Sinee the approval of the plan, several ageneies 
have been testing biometrics identification systems, the state has rejected the Real-ID 
program, and an information sharing program has been established. 

Several agencies have started pilot programs for implementing biometric 
identification technology. Even so, the pilot programs are limited to police substations 
with identification capability limited to known criminals. Biometric identification 
information is stored in local law enforcement record management systems and 
information sharing is limited to a manual process. In order to move the technology out 
of the substations and into the field, law enforcement agencies are concerned about public 
acceptance.^ Future research will be required to define privacy requirements for 
biometric identification for mobile fingerprint and facial recognition technologies. 

The Arizona governor and the state legislature have reviewed the Real-ID 
program. The program has met with political resistance and has not yet been adopted. 
However, if the Real-ID program becomes reality in Arizona, it will only improve subject 
identification for those subjects who have drivers’ licenses. Therefore, the technology 
framework for this thesis will not include the Real-ID capability. 

The Arizona Criminal Justice Commission has established a program called 
AZLink that will implement a state and federal law enforcement information sharing 
capability. A pilot program is underway in southern Arizona and will soon expand across 
the state, link together other states, and share information with federal systems. This 
thesis only addresses law enforcement information sharing within Arizona. 


^ Acceptance meaning the act of favorably receiving new technology with approval (Dictionary.Com, 
2010 ). 
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Although the literature presents elements of an approach that may be beneficial to 
achieving the strategy, it does not provide an integrated technology framework to achieve 
law enforcement subject identification and information sharing. 
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III. METHODOLOGY 


Several states have implemented biometric identification capabilities. This 
methodology will examine existing implementations of biometric systems that are used to 
identify subjects at first point of authorized contact and information sharing systems used 
to organize and analyze law enforcement information housed in various incompatible 
databases. A comparative analysis methodology was used to understand and synthesize 
the best practices for designing and implementing biometrics identification systems that 
have been used within law enforcement and to describe how biometrics identification is 
used in an information sharing environment. The comparative analysis will examine 
three components within each state’s technology framework. For the purposes of this 
thesis, there are three components that are included in the technology framework: 
biometric identification technology, information sharing technology, and governance 
models that support the technologies. 

A. SAMPLE DATA 

1. Minnesota’s Biometric Identification and Regional Information 
Sharing 

CriMNet is a framework of organization, processes, data, and technology focused 
on achieving integration of criminal justice processes and data (Macro Group & 
Labyrinth Consulting, 2000). 

The program is not a single system but many systems located around the state 
working together according to common business rules, data definitions and technology 
standards. 

The Minnesota Bureau of Criminal Apprehension (BCA) provided this researcher 
with the CriMNet Implementation Roadmap for biometric identification for Minnesota. 
The roadmap provides a strategic plan for implementing identification processes across 
the state. Hennepin County, Minnesota, provided this researcher with an overview of the 
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Hennepin Justice Integration Program.^ This program is the county’s information sharing 
initiative that is in the process of integrating with the state CriMNet program. In 
addition, the county provided the business rules, processes, and a context flow diagram of 
the county’s Subject Identification and Locator Service program (SILS). 

This researcher selected the Minnesota biometrics implementation roadmap 
because of the systems capabilities to link together subject identification across the state’s 
law enforcement agencies as well as other criminal justice agencies. The Hennepin 
County Justice Integration Program and the Subject Identification and Locator Service 
program were selected as good examples of how regional law enforcement systems can 
maintain independence and still integrate information across other regional jurisdictions. 

2. Los Angeles County Regional Terrorism Information and Integration 
System 

The Los Angeles County Regional Terrorism Information and Integration System 
(RTIIS)^ is an integrated law enforcement information sharing system that receives data 
from independent law enforcement systems and integrates the information into a data 
warehouse system that provides integrated information back to agencies using real-time 
access capabilities (Los Angeles Regional, 2005, p. 2). The Los Angeles County 
Sherriffs Department (LASD) developed the system architecture and supports the 
technology systems for participating law enforcement agencies. 

LASD provided this researcher the RTIIS joint requirement document that was 
developed by various agencies in group work sessions, the RTIIS data repository 
architecture design document, the system data model document, and the RTIIS 
governance model. These documents established the foundation for information sharing 
in Los Angeles County. In addition, LASD has implemented the Los Angeles County 
Regional Identification System (LACRIS). The system provides subject biometric 
information to criminal justice agencies within the county. The county provided this 


^ In 2005, the Criminal Justice System Information Integration Project was renamed to the Hennepin 
Justice Integration Program. 

^ The RTIIS also includes law enforcement agencies in Las Vegas Nevada. 
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researcher with an information flow diagram, usage information, and success stories. 
The RTIIS was selected for research because the system uses a Coplink data warehouse 
approach. The same approach used within the Arizona AZLink program. The LACRIS 
system was selected to research integration capabilities with the RTIIS. 

3. Wisconsin Department of Justice Fast ID 

The Wisconsin Department of Justice provided this researcher a document that 
describes the system and how it is used in the field. The FAST ID system is Wisconsin’s 
biometrics identification mobile fingerprint biometrics identification system. The 
research will compare the Fast ID capabilities to those biometric systems used in 
Minnesota and the Los Angeles County. 

4. Vermont Law Enforcement Data Information Sharing Initiative 

As part of the Vermont Justice Information Sharing System (VJISS), in 2007 
Vermont initiated the Vermont Law Enforcement Data Information Sharing Initiative 
(LEDSI) program. The Vermont Department of Public Safety provide this researcher an 
overview of the VJISS strategic plan, privacy policy for law enforcement information 
sharing, and the technology services strategic plan that identifies the EEDSI technology 
needs. The Vermont EEDSI does not use Coplink and the data warehouse approach. 
Regardless, the information provided will allow research into privacy policies 
requirements for technology. 

B. DATA COLLECTION 

Many states do not publish technology documentation. Therefore, research was 
conducted by contacting practitioners and technologists across various states to retrieve 
existing documentation. Identifying contacts in each state and reviewing all possible 
combinations of technology frameworks and documentation would have been a massive 
effort. To narrow down the research, information collection for the technology 
framework focused on examining the use of existing biometric identification technologies 
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used in Arizona and the law enforeement information sharing teehnology that is being 
used in the AZLink program. The eriteria for seleeting initial eontaets were based on 
reeommendations made to this researeher by: 

• Law enforeement professors at the Naval Postgraduate Sehool 

• The FBI’s Next Generation Identifieation Program Offiee (NGI) ^ 

• 12 Group 

• Sagem Morpho-Morpho Division 11 

Based on reeommendations the following states, regions, and loeal law 
enforeement ageneies were eontaeted: 

• Massaehusetts—Boston Poliee Department 

• Colorado—Aurora Colorado Poliee Department 

• Wiseonsin—Department of Justiee - Crime Information Bureau 

• California—Los Angeles County Sheriffs Department 

• Florida—Department of Law Enforeement 

• Missouri—Criminal Justiee Information Serviees Division 

• Minnesota—Bureau of Criminal Apprehension 

• Texas—Department of Publie Safety Biometries Identifieation Division 

• Ohio—State Attorney Generals Offiee 

• Vermont—Department of Publie Safety 

Researeh requests ineluded ealling eaeh praetitioner and teehnologist to diseuss 
this thesis and the requested doeumentation. In addition, emails were sent out that 


The NGI Program Office’s mission is to reduce terrorist and criminal activities by improving and 
expanding biometric identification. One objective is to share biometric identification information with state, 
regional, and local law enforcement agencies (Next generation, n.d.). 

11* 12 Group provides Coplink as the law enforeement information sharing solution to Arizona. 

11 Sagem Morpho-Morpho Division is the sole souree for biometries identifieation produets for 
Arizona. 
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outlined the information requested for analysis. Additional phone calls where used for 
clarification when needed. The following information was requested: 

• Strategies, plans, and design documents for implementing biometrics 
technologies. 

• Listing of law enforcement or criminal justice agencies involved. 

• Listing of technology products. 

• Data and process flow diagrams. 

• Strategies, plans, or design documents for implementing law enforcement 
information sharing. 

• Governance documentation (organization structures, roles and 
responsibilities, and policies) 

• Any statistics or success stories. 

Out of the 10 states contacted, four states, Minnesota, Los Angeles County California, 
Wisconsin, and Vermont contributed information included in this thesis. 

Many states, regional, county, and local law enforcement agencies do not publish 
technical documentation; however, information can be obtained through public requests. 
Information for this thesis was retrieved through direct contact with practitioners and 
technologists that work across various departments within state agencies or through 
documentation posted on the internet. Some states create extensive documentation and 
others have very limited documentation. The type of documentation retrieved came in 
many forms; formal documents, graphical charts, information and process flow 
documents and personal emails. 
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IV. ANALYSIS 


A. MINNESOTA BIOMETRICS IDENTIFICATION AND INFORMATION 

SHARING 

I. Minnesota’s Technology Framework Components 

Minnesota’s biometrics identification program is the state’s Automated 
Fingerprint Identification System (APIS) used to identify subjects’ during the jail 
booking process and the mobile field officer biometrics system used by law enforcement 
officers to identify subjects’ in the field. In addition, Minnesota is now testing subject 
identification validation against the FBI’s Repository for Individuals of Special Concern 
(RISC). 

The state also provides a criminal justice subject event tracking system called the 
Name Event Index Service (NEIS). Through a database indexing capability, NEIS links 
together information stored in disparate criminal justice systems to subjects identifiers. 
In addition to the state’s NEIS system, Hennepin County and other counties provide their 
own independent subject identification index systems. Hennepin County provides the 
Subject Identification and Eocator Service (SILS) System. Independent criminal justice 
systems can retrieve information using the index systems at a state level or just within the 
county. 

Minnesota’s criminal justice agencies maintain and manage their own 
information. Information sharing capability is provided by the state NEIS system. The 
system provides access to disparate systems across agencies and consolidates the 
information for presentation and reporting. 

The state’s Department of Public Safety provides oversight for both biometric 
identification and information sharing capability through a program called CriMNet. 
Governance for the program is provided by the Criminal and Juvenile Justice Information 
Policy Group (CJJIPC) and the Criminal and Juvenile Justice Information Task Eorce 
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(CJJITF). The following diagram illustrates the Minnesota components in the state’s 
technology framework. Figure 2 illustrates Minnesota’s Technology Framework for 
subject identification and information sharing. 
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Figure 2. Minnesota’s Technology Framework (Components and Elements) 


2. What is CriMNet? 

Minnesota has recognized the need to have accurate integrated criminal justice 
information available for decision making. Agencies depend on information provided by 
other organizations. Without information sharing, criminals and suspects can remain free 
because information from one state agency in a county may not be available to a judge in 
another county. CriMNet is Minnesota’s solution for criminal justice information sharing 
across the state. 

CriMNet is a state-level program that works with Minnesota State and 
local agencies to make accurate and comprehensive criminal justice 
information available to criminal justice professionals in law enforcement, 
the courts and corrections. It is part of the Minnesota Bureau of Criminal 
Apprehension (BCA) (About CriMNet, n.d.). 
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The BCA was created by the State Legislature in 1927 to assist law enforcement 
agencies throughout Minnesota in solving local crimes and apprehending criminals. The 
BCA is part of the Minnesota Department of Public Safety (BCA History, n.d.). 

CriMNet is not a single technology solution, but an effort that is shared between 
executive, legislative, and judicial branches of government with a focus on improving 
public safety (About CcriMNet, n.d.). 

CriMNet is not a single database or technology solution. It exists to coordinate 
information sharing from a statewide and potentially nationwide viewpoint known as the 
“enterprise” view 12 so that systems can work together. This requires the development of 
statewide standards for data, technology and business practices and methods for agencies 
to access and understand those standards. (About CriMNet, n.d.). 

a. CriMNet Vision 

CriMNet “provides for the safety of the public, victims, and criminal 
justice practitioners through delivery of accurate and timely information via efficient and 
effective processes and systems.” (Macro Group & Labyrinth Consulting, 2000). 

b. CriMNet Goals 

• To accurately identify individuals. 

• To make sure that criminal justice records are complete, accurate, 
and readily available. 

• To ensure the availability of an individual's current status in the 
criminal justice system. 

• To provide standards for data sharing and analysis. 

• To maintain the security of information. 

• To accomplish our tasks in an efficient and effective manner. 
(About CriMNet, n.d.) 


The enterprise view is sometimes referred to as the CriMNet Enterprise Arehiteeture. 
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3. 


The Story of Two Identical Twins 


The Minnesota Identifieation Roadmap has an excellent example of how two 
subjects with very similar names can be mistaken when faced by an officer and human 
error can create inaccurate information with law enforcement records (Integration 
Architects, 2005, p. 5). John and Jonathon Echols are identical twins with criminal 
records in Minnesota. When an officer confronted John with a warrant for arrest, John 
claimed innocence. The officer assumed John’s real name was Jonathon and to took him 
to jail. Once the officer had John printed at the jail and the biometrics were compared to 
his records on file, it was learned that John had a twin brother named Jonathon. John was 
then released. 

Human error occurred when a court clerk compared two sets of records, one set 
for John and one set for Jonathon. The clerk investigated the subjects’ demographics and 
dates of birth and assumed the two sets of records contained information about the same 
subject. The clerk merged the records together. During a jail booking process for 
Jonathon, the merge was discovered and it took considerable time to untangle the 
electronic records (Integration Architects, 2005, p. 5). The above example is only one 
case out of many with identity and record accuracy issues found in Minnesota. 

4. Identification Roadmap Initiative 

The expansion of the integrated Minnesota Court Information System (MNCIS) 
across 87 counties demonstrated the complexity of information sharing on a state wide 
basis. Many court systems had records of the same subject and in many cases; the records 
had inaccurate information (Integration Architects, 2005, p. 3). In 2004, an Identification 
Steering Committee was formed to address identification and record accuracy issues. In 
2005, the steering committee held several workshops that examined the criminal justice 
system from a subject identification perspective and the impact to the criminal justice 
business (Integration Architects, 2005, p. 7). The outcome of the workshops yielded six 
areas that needed dramatic improvements in identification: 
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• Return comprehensive identity information to law enforcement agencies 
and detention facilities. 

• To accurately identify individuals. 

• To ensure the availability of an individual's current status in the criminal 
justice system. 

• To make sure that criminal justice records are complete, accurate, and 
readily available. 

• To provide standards for data sharing and analysis. 

• To maintain the security of information. (Integration Architects, 2005, 
pp. 7-8) 

This researcher focused on improvements one through three to address the 
biometric identification section of the technology framework. The standards for data 
sharing, analysis, and maintaining the security of information is specific to Minnesota. 
There are three sections in the identification roadmap that are specific to Minnesota’s 
biometric identification technology framework, the identification protocol standard, the 
Biometric Identification Workflow Manager (BioID) and the Subject and File 
Enhancement System (SAFE). BioID is a system that retrieves identity information from 
multiple justice systems and monitors the status of a subject as they move through the 
justice process. SAFE is a system that captures a person’s identify and event information 
(Integration Architects, 2005, p. 11). 

The SAFE program has been renamed to the Name Event Index Service (NEIS) 
(J. Olson, personal communication, February 16, 2010). For the purposes of this thesis, 
future references to SAFE or NEIS are interchangeable (SAFE/NEIS). 

5. Identification Protocol Standard 

The identification protocol is the Minnesota standard for biometric identification 
of a subject. The standard determines who can be identified and under what conditions. 
The standard also defines who is authorized to make the identification, the appropriate 
method for the given situation, and the procedure for managing the biometric 
information. Minnesota has defined the identification protocol standard as a state statute 
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299C.10 (Integration Architects, 2005, p. 1). Having the standard defined by state law 
establishes a baseline for possible challenges in court and also gives the public the right 
to change the law. 

The state statute defines the type of felony and misdemeanor crimes that require 
biometric identification. The crimes apply to both adults and juveniles. The statute 
extends beyond those subjects arrested and covers officer judgment. If an officer 
believes a subject is a fugitive from justice, the officer has the right to request fingerprint 
biometric identification (Integration Architects, 2005, p. 2). 

The Minnesota law calls for biometric identification at the earliest authorized 
point in the justice system (officer contact in the field), during jail booking, court 
hearings, and in correctional facilities. The identification procedure is to be performed by 
sheriffs, peace officers, and community corrections agencies (Integration Architects, 
2005, p. 2). 

In many states, the first time subject electronic fingerprints are taken happens at a 
jail facility during the booking process. The standard process for booking a subject into 
jail is to capture an electronic image of all 10 fingers (10-Print) within the Automated 
Fingerprint Identification System (APIS) and compare the images against the APIS 
identification database. In addition, the images are sent to the FBI’s Integrated 
Automated Fingerprint Identification System (lAFIS)!^ to compare against the federal 
identification system. 

If the set of fingerprints submitted to the FBI’s I APIS system are unique (no 
match) a new FBI record will be created. The master record will contain the name and 
demographics of the information submitted by the requesting agency and a unique FBI 
identification number (FBIID) will be assigned. The FBI does not perform any 
verification against the subject’s name or demographics. If the subject is arrested again 
(from any state), any new names and demographics will be recorded as alias information 
and attached to the master record. If a new record is created or there is a match to an 


lAFIS, is a national fingerprint and criminal history system maintained by the Federal Bureau of 
Investigation. For more information on the lAFIS, see http://www.fbi.gov/hq/cjisd/iafis.htm. 
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existing record, the FBI will respond to the requesting agency with the master record of 
identification information and all associated alias information. Changing the subjects 
name and demographic information can be done, but it is a lengthy, formal process 
(F. Jaco, personal communication, February 16, 2010). 

The only accurate information returned by the FBFs lAFIS system is the FBIID 
associated with the subject’s biometrics. There is no guarantee the subject information is 
accurate. The FBI associates all federal criminal information with the FBIID, not a 
subject’s name or demographics. However, the FBI does allow searching against the 
subject’s information. Law enforcement agencies understand the results may not yield 
the appropriate information. 

In addition, the fingerprints submitted to the FBI lAFIS system may not meet the 
quality standards established by the bureau. In this situation, a state record will be 
created without creating a link between the State’s Identification Number (SID)14 and the 
(FBIID). 

Minnesota will either create a new record or match against an existing record 
through its AFIS system based on the biometrics submitted at booking time. Information 
will be sent back to the jail facility during the booking process. The information sent 
includes the SID, subject’s name and demographics associated with the state record and 
the FBIID if available. 

New technology allows the integration of smaller mobile biometric identification 
devices using two fingers (2-FID) with the existing state AFIS system. The 
identification protocol modified the existing state AFIS identification process to take 
advantage of the new technology. The protocol allows a 2-FID be taken prior to booking 
by field officers. The 2-FID system validates the subjects identify against the existing 
AFIS database. If a match is found, the subject’s identification information (along with 


Each state creates a unique subject identifier called a SID. The SID is based on a subjects 
fingerprint biometrics. The SID is unique only within the state. 

New mobile technology also allows the use of two fingers, four fingers or a palm print. Some 
vendors refer to this type of technology as flat prints or patterns. For the purposes of this thesis the 
researcher references only two fingerprint units (2-FID). 
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additional information provided by the SAFE/NEIS system) is returned to the requesting 
offieer. The state SID is used to link together the information from the state AFIS system 
and the SAFE/NEIS system. If no match is found, a “no hit” status code is returned by 
the SAFE/NEIS system. If warranted, the subject will be brought into the jail for 
fingerprinting (Integration Architects, 2005, p. 3). 

The following diagram depicts a field identification scenario where the 
identification is completed by a filed officer and the information is passed on to the jail 
management system for booking and the police department’s record management system. 
Figure 3 illustrates the process law enforcement officers use in Minnesota for a typical 
subject field identification. 

/■ Identification Roadmap 

Cniiliyplcl'_ Future State Conceptual Design Overview 

The following diagram depicts a typical field identification scenario. 



any officer across 
jurisdictions 


4 Identification information optionally 
forwaitJed to Jail Management System 
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Police Records 
Management 
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Figure 3. CriMNet Field Officer Identification scenario (From Integration Architects, 

2005, p. 2) 

The identification protocol also identifies management procedures that will be 
followed to maintain data accuracy and personal privacy protection; 


32 





























• Systems and processes will adhere to the Minnesota Government Data 
Practices Act; 

• Subject identification keys will be maintained, exchanged, and accessed 
electronically; 

• Fingerprint quality will be maintained (quality standards must be defined 
and enforced). (Integration Architects, 2005, p. 3). 

Finally, the identification protocol does not define what information should be 
contained in criminal information records. The process of who should be identified, 
under what conditions, who is authorized to make identifications, methods used, and the 
procedures for managing identification information is completely independent from any 
other criminal justice process or system (Integration Architects, 2005, p. I). 

6. Name Event Index Service (SAFE/NEIS) 

A subject can move through the criminal justice system many different ways and 
multiple times across police departments, court systems, correction systems, and 
jurisdictional boundaries. Subject criminal events are captured in various independent 
record management systems. Since CriMNet is not a single system but a program that 
exists to coordinate information sharing, criminal justice agencies create independent 
identification systems. The SAFE/NEIS system was created to track subject criminal 
events, various agency subject identification keys and link them together. A series of 
events and identification keys are linked together through a thread (Integration 
Architects, 2005, p. 2). 

A thread can be considered as a criminal case.^^ Eor example, a subject was 
arrested for burglary by the Hennepin County Sheriffs Office, and at a different time the 
subject was arrested for driving under the influence of alcohol (DUI) by the Ramsey 
County Sheriffs office. The events associated with the Hennepin County Sheriffs 

The Minnesota Government Praetiees Aet is found in Miimesota Statutes, ehapter 13. The statues 
are ereated on the presumption that state and loeal government reeords are aeeessible to the publie, unless a 
statute or rule provides otherwise. The Aet eontains many of the statutory provisions that elassify various 
types of government data as other than publie, and thus restriets aeeess to the data in some way. The 
features of the Aet ean be found at http://www.house.leg.state.mn.us/hrd/pubs/dataprae.pdf 

A ease ean have multiple eriminal eharges. 
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Office arrest, jail booking, eourt proeess, and adjudieation is eonsidered a thread. The 
events assoeiated with the Ramsey County Sheriffs Offiee arrest, jail booking, eourt 
process and adjudication is considered a different thread. Eaeh thread traeks the subjeet 
through the eriminal justiee proeess. 

The SAFE/NEIS system eaptures the subject identification!^ information along 
with the event information from eaeh ageney as the event oeeurs. The system will build a 
subjeet profile aeross all events using the ageney’s subjeet identification information 
linked together with the Global Identification Service Identifier (GID) created by the 
SAFE/NEIS system. The GID is used to uniquely identify a person within the 
SAFE/NEIS system. Associated with a GID are one or more Eoeal Person Identifiers 
(EIDs). The LIDs used by agencies as person identifiers (Integration Arehiteets, 2005, 
p. 32). Figure 4 illustrates the integration of threads into the SAFE/NEIS system. 



Figure 4. CriMNet SAFE/NEIS Integrated Ageney and State Biometrie Identifieation 


Counties have independent identifieation systems. The subjeet identifieation identifier is unique to 
the subjeet within the eounty. 
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The SAFE/NEIS system is a centralized identification service provided by the 
state; however, larger counties such as Hennepin and Ramsey counties provide their own 
identification services for their respective criminal justice agencies. These systems are 
known as regional complex identification systems. The SAEE/NEIS system interacts 
with both complex identification services and simple identification systems unique to a 
single agency. This researcher will examine the Hennepin County complex Subject 
Identification and Eocator Service (SILS) later on. Eigure 5 illustrates the relationship 
between the SAEE/NEIS identification system, a complex county system, and a simple 
system used by a single agency. 



Figure 5. Distributed option (From Integration Architects, 2004, p. 9) 

The subject identification and event profile within SAFE/NEIS will allow a 
“Subject Identification Viewer”i9 to access information across state and local agencies. 
In addition, by using the date and time stamps the current status of a subject can be 


The research did not identify if the Identification Viewer had been created after the document was 
published. 
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determined in any thread (Integration Architects, 2005, p. 4). Figure 6 illustrates the 
vertical and horizontal subject identification information available to the viewer. 
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Figure 6. CriMNet SAFE/NEIS Subject Identification Viewer (operational 2010) 

7. Biometric Identification Workflow Manager and the Conceptual 
Model 

The biometric identification workflow manager handles retrieval of identify 
information from multiple justice applications and monitors events (Integration 
Architects, 2005, p. 11). The primary functionality is managing the transaction flow, data 
processing rules, and the routing of identification transactions. In addition to the 
SAEE/NEIS system, the Biometric Identification Workflow Manager manages the 
information exchanges between two other identification systems used by criminal justice 
agencies, the Automated Eingerprint Identification System (including 2-FID) and the 
Minnesota Repository for Arrest Photos (MRAP) system. The above systems are 
packaged as the CriMNet identification system that supports the state’s criminal justice 
applications and the events that occur to subjects traversing through the criminal justice 
process (Integration Architects, 2005, p. 3). Figure 7 illustrates the identification roadmap 
conceptual model. 
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Figure 7. CriMNet Implementation Roadmap Conceptual Model (operational 2010) 

(After Integration Architects, 2005, p. 3) 

The CriMNet identification system includes the Implementation Protocol, 
SAFE/NEIS system, and the Biometric Identification Workflow Manager. The 
identification system has far reaching impacts for linking together subject information 
across systems and events as shown in the conceptual model. The implementation 
roadmap goes into further detail about integration between justice systems and events. 
The roadmap identified seven categories and 157 system integration opportunities for 
subject information across the criminal justice lifecycle. The following table (Table 1) 
summarizes the possible connections for linking together information using the 
SAEE/NEIS system and the Biometric Workflow Manager events (Integration Architects, 
2005, pp. 5-65). 
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Table 1. CriMNet Justice Lifecycle Event Model Summary 


CriMNet Justice Lifecycle Event Model Siiininotv 

Event Caterjoiy 

Definition 

System 

Integicitioii 

Oppoitimities 

Applicant Services 

backqround checks, identity theft, mistaken identity requests 

5 

Investiqations 

subject identification Investiqations 

11 

Charqed with an Offense 

arrest, bookinq, citations, prosecution, release, transfer 

43 

Court Processinq 

warrant, appearance, case, disposition, orders, sentencinq, summons 

49 

Supervision 

sex offender and criminal reqistration, probation, check-in 

18 

Incarceration 

prison intake and release, workhouse intake and release 

25 

Post Release Supervision 

offender on probation encounters law enforcement or probation officer 

6 




Criminal Justice Cateqories 

= 7 


Subject information inteqration opportunities = 157 


8. Identification Roadmap Enablers 


The Implementation Roadmap identified five key enablers that were required to 
be successful at creating an integrated biometric subject identification capability across 
Minnesota’s criminal justice agencies. 

• Executive long term focus and commitment that included funding, 
resources, and sponsorship. 

• Eegislative champions that support changes and additions to statutes and 
also funding requests. 

• Adherence to State and Eederal data privacy laws. 

• Completion of a Privacy Impact Assessment (PIAj^o for the SAEE/NEIS 
system. 

• Cross agency program oversight. (Integration Architects, 2005, p.9-I0) 

9. Hennepin County Justice Integration Program 


Hennepin County is the largest population county of the 87 counties in 
Minnesota. The county ranks sixteenth in population size across the metropolitan areas 


20 Privacy Impact Assessment is a series of questions that evaluate the processes through which 
personally identifiable information is collected, stored, protected, shared, and managed by an electronic 
information system or online collection application (U.S. Department of Justice, 2008, p. 1). 
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within the nation. The county houses a quarter of the state’s population and includes the 
city of Minneapolis (Fast Facts, n.d.). Hennepin County has 47 law enforcement 
jurisdictions (About HCSO, n.d.). 

The Hennepin County Criminal Justice System Information Integration Project 
(CJSIIP) began in 1999 as Minnesota’s efforts to create an information sharing 
environment that allowed all criminal justice agencies to share information. The initial 
scope for integration covered the county’s law enforcement agencies, city and county 
prosecutors, courts, probation and parole, jails, and the county’s incarceration facility. 
The CJSIIP efforts enticed other counties to establish similar integration efforts (Gil- 
Garcia, Schneider, & Pardo, 2004, p. 12). In 2005, the CJSIIP program was renamed to 
the Hennepin Justice Integration Program (HJIP) (L.Tite, personal communication, 
February 19, 2010). For the purposes of this thesis, future references to CJSIIP or HJIP 
are interchangeable (CJSIIP/HJIP). 

The county effort gained legislature support and funding for the development of a 
state wide integration effort leveraging the best practices from the CJSIIP/HJIP. With the 
interest across other counties, success of CJSIIP/HJIP, and the support from the State 
legislature, CriMNet was created to orchestrate the integration efforts and provide 
services across the counties. Hennepin County serves in an advisory capacity on various 
state-level boards created to guide the CriMNet initiative (Gil-Garcia et ah, 2004, p. 12). 
The Hennepin County Identification and Locator Service System is part of the HJIP. 

a. Hennepin County Subject Identification and Locator Service 

As mentioned earlier, some Minnesota counties maintain their own 
identification services for their respective criminal justice agencies. The Hennepin 
County Subject Identification and Locator Service (SILS) provides a regional 
identification service to agencies in the county. 

Historically, law enforcement agencies. County and City Attorney’s 

offices, courts, and correctional facilities created independent identification systems. The 

SILS system identifies li nks and cross references various subject identifiers associated 

with independent criminal justice record management systems. Agencies are responsible 
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for managing their own criminal justice information and providing identification and 
event information to the State’s SAFE/NEIS system. SIES was created to provide a 
county subject identifier and compliment other county identification initiatives and the 
State CriMNet SAEE/NEIS system (Hennepin County, 2005, p. 3). The HJIP SIES 
system went into production July 16, 2007 (E. The, personal communication, Eebruary 
19, 2010). 

The SIES system accepts various forms of subject identification from 
county agencies. Biometric identification verified against the state AEIS system and 
retrieval of the SID is preferred. The SIES system does not communicate directly with 
SAEE/NEIS (E. The, personal communication, January 26, 2010). However, agencies 
that have not implemented biometric identification can use other identification methods 
such as driver’s licenses, social security numbers, and subject demographics. 

SIES stores the method used for identification by each agency. 
Regardless of the forms of identification used, each agency creates its own unique subject 
identifier that SIES will accept and link together with the Hennepin County Identifier 
(SIES ID) (Hennepin County, 2005, pp. 8-12). A SIES ID begins usually at an arrest or 
a warrant request (Hoch, 2007, p. 6). Eigure 8 illustrates the flow of the SIES 
identification information across various criminal justice agencies. 


21 Identification method is an indicator of how the agency determined the subject’s identification. 
Possible methods are biometric, driver’s license, subject number submitted by another agency, and a 
subject’s demographics. 
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Figure 8. High Level Business Context Overview Diagram (From Hoeh, 2007, p. 11) 

SILS offers a county search capability similar to SAFE/NEIS. Agencies 
can search the SILS system using their agency subject identification key, the SILS ID, 
driver’s license number or subject demographics information. SILS returns cross 
reference link information that identifies agencies within the county that have subject 
information within their record management systems (Hennepin County, 2005, p. 13-22). 
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10. Minnesota Information Sharing 


Each criminal justice agency is responsible for maintaining its criminal justice 
information. The SAFE/NEIS subject identification system in Minnesota only provides 
linkage to ageney systems. The SAFE/NEIS will provide aceess to information across 
disparate eriminal justiee ageney systems, and a eomprehensive view of a subjeet’s 
criminal activity. The SAFE/NEIS pilot program began in 2008 (Name Event Index, 
2008). The system is expeeted to be operational in 2010 with a limited number of 
statewide systems providing information (J. Olson, personal eommunication, February 
16, 2010). 

11. Minnesota CriMNet Program Office Governance 

Governance of CriMNet is the responsibility of the Criminal and Juvenile Justice 
Information Poliey Group (CJJIPC) and the Criminal and Juvenile Justice Information 
Task Force (CJJITF). Both groups were established by the Minnesota legislature, 22 to 
over see criminal justiee information policy (CriMNet Program Office, n.d.). 

The poliey group has responsibility for budgets, program priorities, direct hiring 
of the CriMNet program director, and tracking criminal justice information sharing 
issues. The poliey group has responsibility for completing statewide criminal justice 
information integration and makes reeommendations to the governor, legislature and the 
Supreme Court for deeision making (Criminal and Justice, n.d.). Group membership is 
made up commissioners from the executive braneh and judieial branch of government. In 
addition, the ehairman and vice-ehairman of the task foree partieipate in the group. The 
policy group also appoints members to the task forceps (CriMNet Program Offiee, n.d.). 

The Criminal and Juvenile Justice Information Task Force is made up of eriminal 
justice and state agency professionals, local municipal representatives and state citizens 
(CriMNet Program Offiee, n.d.). The task force provides oversight and monitors 


22 Minnesota Statutes 299C.65. 

22 As defined by Minnesota state law. 
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CriMNet related projeets as direeted by the poliey group. The task foree also reviews 
funding requests, appoints projeet delivery teams, seeks resourees for issues through the 
poliey group (Task Force, n.d.). 

The Minnesota Bureau of Criminal Apprehension (BCA) provides oversight and 
state administrations services for the CriMNet Program Office. The BCA is a division of 
the Minnesota Department of Public Safety (CriMNet Program Office, n.d.). 

The Minnesota Justice Information Services (MNJIS) provides the technology 
support for the biometrics’ and information sharing systems. MNJIS was formed in 
October 2008 and took on the responsibility of the criminal justice information systems 
from CriMNet. MNJIS is now a division directly at BCA (MNJIS Programs, n.d.). 
Figure 9 illustrates the BCA organizational structure and the influence the policy group 
and the task group have on the CriMNet program. 
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Figure 9. CriMNet Governance and Influence 
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12. Minnesota Best Practices 


Hennepin County provided the foundation for best practiees for the state CriMNet 
effort. The county, in coordination with the state, implemented the Criminal Justice 
System Information Integration Project (CJSIIP/HJIP). The project identified best 
practices that became instrumental in other CriMNet projects. The purpose of 
researching the CJSIIP/HJIP is to look at the key elements used within the project as they 
relate to information sharing and governance. 

a. CJSIIP/HJIP Business Case Foundation Points for Sharing 
Information 

The business case for gaining legislative support, funding, and 
sponsorship of CJISIIP/HJIP rested on the following foundation points. 

• Shared information is more accurate. 

• Collect the same information multiple times across many different 
systems. This leads to incomplete records, conflicting data, and 
inaccurate information. The objective is to collect information 
once and share many times. 

• Shared information is timelier. 

• Shared information is more readily available. 

• Shared information is more complete. 

• Information from many sources can be assembled into a complete 
record. [This researcher also notes from experience that time is 
critical when initiating an investigation to a crime. Having a 
complete record of a subject’s information can be critical to an 
arrest.] 

• Shared information is less expensive. 

• Information stored once and shared is less expensive than 
collecting the information many times. (Macro Group & Labyrinth 
Consulting, 2000, p. 2) 
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b. CJSIIP/HJIP Business and Technology Framework 

Hennepin County developed a framework that ineluded elements for 
sueeess. The projeet’s sueeess was highly dependent on eross funetional and highly 
interdependent business and teehnieal staff, eriminal justice processes, data, standards, 
and shared technology. Key elements include: 

• Organizational model 

• The organizational model is made up of members across criminal 

justice agencies. The model also includes roles and responsibilities 
to effectively support, fund, and manage information sharing. 

• Process model 

• The process model includes the business processes and the 
information flows across the various processes. 

• Data model 

• The data model includes the data definition and standards required 
for sharing information between criminal justice agencies. 

• Technology model 

• Technology includes the functionality, guidelines and standards 

that enable information sharing in an integrated environment. 

• Motivational model 

• The motivation model provides each organization the will to 

succeed in adding value to the state as well as each organization. 
CJSIIP/HJIP recognizes that the vision of information integration 
has to include shared values. (Macro Group & Labyrinth 
Consulting, 2000, p. 2) 

c. CJSIIP/HJIP Critical Success Factors 

CJSIIP/HJIP consists of individual projects across criminal justice 
agencies. The projects all share several aspects that were critical to information 
integration and information sharing. Program governance has the responsibility to 
address each critical aspect required for success. In order to be successful, the follow 
aspects are addressed: 


45 




• Cultural change 

• Thinking and behavior needed to shift from an agency centric view 

to a CJSIIP/HJIP enterprise view. Ageneies and teams must work 
cooperatively to insure the suceess of all individual projects. Even 
if an ageney needs to alloeate funding and resources to a critieal 
projeet that may only indirectly benefit the ageney. 

• CriMNet compliance 

• Since CriMNet exits to eoordinate information sharing form a 

statewide and potentially a nationwide viewpoint (enterprise view), 
CJSIIP/HJIP projects must comply with CriMNet statewide 
standards for data, technology, business practices and methods. 

• CriMNet vision 

• The vision is the standard by which integration deeisions and 
efforts are judged. As stated earlier, the vision “provides for the 
safety of the publie, victims, and criminal justice practitioners 
through delivery of aceurate and timely information via efficient 
and effeetive processes and systems.” 

• Stable funding 

• CJSIIP/HJIP funding is required for new projects and ongoing 

support for the new systems. The eritical aspect of funding was 

that funding could not come from current agencies budgets. New 
funding sources had to be addressed from the state budget. 
Governance and legislative efforts hand to address this critical 
aspect. 

• Training and communications 

• The eritical aspect was to expand training and communieations to 
provide a broad CriMNet integrated approaeh to county and state 
goals and objectives. Shared training, information, and 
communieation were critieal to understand difference in data, 
technology, business practices and methods used aeross ageneies. 

• Dedicated staff 

• All the CJSIIP/HJIP projeets involved more than one agency. The 
eritieal aspeet was that the resourees alloeated by each agency had 
to have the project as a top priority over loeal agency efforts. In 
addition, the mind set of the staff had to aceept new teehnologies. 
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willing to accept cultural changes, and work towards providing 
deliverables aeeeptable to CriMNet and shared solutions 
aeeeptable to all ageneies. 

• State initiatives 

• The governanee body must play and aetive roll at the state 
legislature, to implement polieies, deliver funding, or implement 
state initiatives. (Maero Group & Labyrinth Consulting, 2000, p. 3) 

13. Summary 

Both the SAFE/NEIS and SILS systems are examples of using subjeet 
identifieation methods to ereate links between disparate eriminal justiee ageney systems. 
Ageneies have the option to seareh for subjeet information relationships at both the 
eounty and state level. Biometrie identifieation that ereates the State Subjeet Identifier 
(SID) happens when the subjeet is booked at the jail. Booking time is where the state 
verifies information with the EBI’s lAFIS system. Minnesota supports a two-tier 
biometrie identifieation proeess, one at the state level and one at the federal level. 
Hennepin County does not inelude an AFIS system and relies on subjeet identifieation 
information from law enforeement reeord management systems (FBIID, SID, name, and 
demographies). Subjeet eriminal reeords are dependent on both the state and federal 
biometries identifiers. Searehing on a subjeets name and demographies is available but 
may not return the right results. 

Eaw enforeement ageneies have the eapability to use 2-FID biometries 
identifieation using mobile deviees in the field. The 2-FID systems do not store any 
information and do not ereate eriminal reeords based the 2-FID. The units are used to 
verily identity and retrieve limited information from SAFE/NEIS. SAEE/NEIS also 
ereates pointers to other potential sourees of information that resides in independent 
eriminal justiee ageney disparate systems. 

Not all eriminal information is linked together by biometries identifieation keys. 

Information ean still be dependent on subjeets’ names and demographies. CriMNet and 

eounty systems still provide seareh eapability to eriminal justiee reeords based on 

subjeets’ names and demographies. CriMNet and the eounty systems only provide and 
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index capability to disparate systems. Criminal justice agencies have the responsibility to 
provide information for updating these index systems with the most accurate information 
possible. Agencies understand the only unique way to link a subject to their records is 
through biometric identification used to establish local agency, state, and county 
identifiers. 

Minnesota is participating in the FBI’s Repository for Individuals of Special 
Concern (RISC). This system is part of the FBI’s Next Generation Identification (NGI) 
program. The system allows 2-FID mobile systems to rapidly access an FBI system that 
houses information for individuals the pose a threat to public safety. RISC houses a 
subset of the FBI’s lAFIS system and includes wanted person information, the Sex 
Offender Registry, and known suspected terrorists (Advanced Fingerprint, n.d.). 

Minnesota maintains criminal justice information in disparate systems and uses a 
federated ^4 query approach to accessing information. In addition, the state and counties 
have developed and Indexing capability that allows searching across the disparate 
systems. 

B. LOS ANGELES COUNTY BIOMETRICS IDENTIFICATION AND 

INFORMATION SHARING 

I. Los Angeles County Technology Framework Components and 
Elements 

Los Angeles County supports two biometric identification capabilities. First, Los 
Angeles County provides the Regional Identification System (LACRIS). The system 
provides subject biometric information to criminal justice agencies within the county. 
The LACRIS system is integrated with the California State Automated Fingerprint 
Identification System (CAL-ID). Second, the LACRIS system provides mobile 
identification capability to officers in the field. The mobile units provide both fingerprint 
and facial image verification to insure accuracy. 

24 This type of search is sometimes called a federated query. Federation enables end users to issue a 
query that searches multiple sources and displays results in separate Web parts on a single search results 
page. For more information, see Microsoft Tech Notes Website http://technet.microsoft.com/en- 
us/library/bb905377.aspx. 
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Similar to Minnesota, each agency within the county has the responsibility to 
maintain its own criminal justice information. However, information sharing within Los 
Angeles County (and other counties within the state) uses a centralized approach. 
Information is provided by participating agencies to a central repository system called the 
Incident Reporting Information System (IRIS). Agencies can use the information for 
searching, analysis and reporting. 


The Los Angeles County Sheriffs Department provides oversight for the 
LACRIS biometric systems and the Los Angeles Regional Integrated Law and Justice 
Governance Committee provides oversight for the IRIS system. Policy and technology 
teams are created and shared between agencies. In addition, the Los Angeles County 
IRIS system is integrated with the Los Angeles Police Department’s (LAPD) centralized 


repository system and the Regional Terrorism Information and Integration System 
(RTIIS). Oversight for the information sharing effort between the three systems is 
managed by a consortium of 45 municipal law enforcement agencies within the county. 
Figure 10 illustrates the Los Angeles County’s Technology Framework for subject 
identification and information sharing. 
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Figure 10. Los Angeles County’s Technology Framework (Components and Elements) 
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Los Angeles County Regional Identification System 


Los Angeles County covers 4,000 square miles and supports a population of over 
10 million residents (Norton, 2009). The county has over 80 cities and unincorporated 
areas. Law enforcement agencies include the Los Angeles County Sheriffs Department, 
California Highway Patrol, and over 40 municipal agencies (Norton, 2009). Los Angeles 
County Regional Identification System (LACRIS) is managed by the Los Angeles 
County Sheriffs Department (LASD). 

This researcher analyzed the LACRIS and its relationship to the California 
Department of Justice State system (CAL-ID). It should be noted that many counties 
maintain independent APIS systems. During the county booking process, the Los 
Angeles Regional Identification System (LACRIS) APIS first checks the submitted 
fingerprints against its own database and then sends a request to CAL-ID to check 
fingerprints and determine if there is a state record that matches. In addition, CAL-ID 
sends a request to the PBI’s lAPIS system. The process is the same as in Minnesota for 
checking and creating state and PBI lAPIS records. Again, it should be noted that the 
PBIID and the state SID 25 are the key identifiers to the subject’s records. Names and 
demographics may not be accurate and are considered aliases. LACRIS receives a 
response from CAL-ID and from the PBI lAPIS system if available. The LACRIS APIS 
system will create a new record if the state does not show a match to a LACRIS record 
and a County Subject Identifier (CID). The available identifiers and associated subject 
information is sent back to the jail during booking. 

3. Los Angeles County Sheriff’s Department Mobile Identification 
System 

The Los Angeles County Sheriffs Department (LASD) is the largest Sheriffs 
Department in the world and supports nine community colleges, 48 Superior Courts, 
19,000 inmates housed in correctional facilities and the residents of the county. The 


25 Minnesota, California, and many other states use the same SID acronym to represent the state 
subject identifier. It should be noted that the identifier is unique within the state. The identifier does not 
match across states. 
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department has 9,500 sworn officers and 7,200 non-sworn personnel (SEARCH, 2009, p. 
2). LACRIS has implemented mobile 2-FID identification capability using Cogent 
“Bluecheck” devices provided to field officers (of any agency in the county) and has 
documented success cases. 

a. The Story of Changing Appearance to Avoid Arrest 

The following is an example of how mobile identification technology was 
used to determine the true identity of a homicide suspect using false identification. 

March 20, 2008—An LASD Homicide Detective reported that he had 
been investigating a murder in Palmdale and identified three suspects. He 
had arrested two of them and was actively searching for the third. After 
about three weeks, the detective got a call from an LAPD officer 
informing him that the third suspect was in custody. The LAPD officer 
working near downtown had stopped the suspect for possible narcotics 
activity. The suspect (who had changed his appearance dramatically) gave 
a false name. The LAPD officer made use of a Bluecheck device and 
within minutes took the suspect into custody after acquiring a positive 
identification and conducting a warrant check. (Norton, 2009) 

b. The Story of Leaving and Re-entering the Country Using a 
Different Name to Avoid Arrest 

The following is an example of a suspect who fled the country and 
returned with new identification documents. The suspect’s true identity was determined 
using mobile biometrics technology. 

January 29, 2008—Huntington Park PD stopped an individual who gave a 
false name and date of birth. After using the Bluecheck device to 
positively identify the individual it was determined that he had a felony 
domestic violence warrant. The suspect had fled the country after the 
warrant was issued and re-entered after several years with a different name 
and date of birth to avoid arrest. (Norton, 2009) 


c. Multi-Modal Identification Implementation 

Currently, the system only accesses the LACRIS AFIS system. However, 
a pilot project in several small counties is underway with the California Department of 
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Justice that will provide search capability into the state’s CAL-ID system. A typical hit 
will occur within five minutes (LASD) and six to eight minutes through the CAL-ID 
system (MeCombs, 2009). The LACRIS APIS system houses approximately 10 million 
reeords. The CAL-ID system houses 19-plus million persons reeords (MeCombs, 2009). 

The LACRIS program has deployed over 2,300 multimodal deviees 
throughout the law enforeement ageneies of the eounty that include faeial reeognition and 
fingerprint identification capability. The deviees include Blackberry PDA’s and biometric 
software running on Mobile Data Computers loeated in patrol oars (L. Norton, personal 
oommunioation, November 3, 2009). Units have been deployed to homioide deteotives, 
ooroner staff, and offioers riding publio transportation systems (Norton, 2009). 

Within the eounty, offioers only use the deviees when an arrest is 
underway or probable oause may lead to an arrest. In addition, offioers are restricted to 
using the deviees only when a subject has no government issued identification or the 
offioer believes the doouments are fraudulent (Norton, 2009). When the mobile 
identifioation devioe aooesses the LASD APIS system, if a reoord is found the system 
returns the subjeot’s name, photograph, and the latest arrest information. If no reoord is 
found, a “no hit” indioator is returned to the requesting officer (LASD Technical Services 
Division, 2007). If the situation warrants an arrest, the offioer will take the subjeot in for 
booking. 

The multimodal system oan transmit a subjeot’s faeial image to the 
DataWorks mugshot system. The faeial recognition software on the system oan searoh 
through the seven million images and return a response in fifteen seconds. The system 
returns several possible matohes from the highest possible matoh to the lowest. Pinal 
verification using facial images rests with the offioer. The system also provides image 
reeognition oapability against the two million soars, marks, and tattoos stored within the 
system. Using fingerprints, faeial image, and body marking photos oan all be used to 
insure verifioation of the subjeot. Onoe verifioation is oomplete, the same information is 
returned as with the APIS system (Dataworks, 2008). Both the APIS and DataWorks 
mugshot systems reoeive their information during the booking prooess. 
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The LACRIS booking system sends the eounty’s subjeet identifier, name, 
and demographics stored in the APIS system to the arresting agency’s record 
management system. Each police department sends their respective subject information 
records to the Incident Reporting Information System (IRIS), discussed in the next 
section. The quality of identification information is critical to the county’s information 
sharing program. 

Future plans include expanding LACRIS to access the county wide 
warrant system, other county APIS systems, the California State Department of Justice 
APIS system, the PBI’s lAPIS biometrics system, and the PBI’s Repository for 
Individuals of Special Concern system. The expectation is that each system will be 
contacted during a single transaction request from an officer. Pigure 11 illustrates the 
flow of information for an officer identification request within LACRIS. In addition, the 
red circle identifies the link into the LASD County IRIS law enforcement information 
sharing environment. 



Figure 11. LACRIS Information Context Flow Diagram 
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The LACRIS mobile identification usage report for 2009 showed PDA 
devices were used by officers 35,772 times with a 44 percent positive hit rate for 
identifying subjects (LACRIS Mobile ID, 2009). Units used in patrol car laptops were 
used 63,146 times with a 40 percent positive hit rate for identifying subjects (LACRIS 
Mobile ID, 2009). Officers being able to verify a subject’s identification four out of 10 
times where a subject’s identification is in question, is a significant improvement 
(LACRIS Mobile ID, 2009). In addition, a positive hit means the subject had a prior 
record on file from a previous arrest. Prior to using the devices, these subjects might not 
have been identified. 

4. Los Angeles County Regional Information Sharing 

In 2006, the Los Angles County Sheriffs Office implemented the Incident 
Reporting Information System (IRIS) using the Coplink data warehouse capability. The 
Coplink data warehouse takes information from disparate data sources, converts the 
information into a common language that can be integrated into a central repository. 
Searches are conducted against the central repository, thereby eliminating the need to log 
into multiple systems. 

The system was the first county’s data warehouse for gathering criminal justice 
agency information from disparate systems. IRIS contains over 43 million records 
(SEARCH, 2009, p. 4). The data warehouse capability extends beyond accessing subject 
records. The data warehouse can also store information about criminal justice events, 
vehicle information, locations, and more. The data warehouse technology is capable of 
building relationships between informational records based on specific key information 
located in documents. The system can build relationships to arrest documents, incident 
reports, citations, warrants, drivers’ licenses, motor vehicle registrations, firearm permits 
and more. Coplink data warehouses can be linked together making it possible to search 
data from other jurisdictions (SEARCH, 2009, p. 8). 

IRIS was implemented during the same time period that the Eos Angeles Police 
Department (EAPD), San Diego County, Orange County, and Imperial County were 
implementing the same data warehouse solution with their respective law enforcement 
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agencies. The Los Angeles County Police Chiefs Association recognized the need to tie 
together the LASD and LAPD efforts and expand the information sharing opportunity to 
regional municipal law enforcement agencies. The Los Angeles County Police Chiefs 
Association established the Regional Terrorism Information and Integration System 
(RTIIS). A consortium of 45 municipal law enforcement agencies participates in the 
RTIIS data warehouse system (SEARCH, 2009, p. 2). Each law enforcement agency 
participates and contributes information from their respective record management 
systems into one of the data warehouse repositories. RTIIS was also formed to coordinate 
information sharing across other regions, states, and eventually with federal law 
enforcement systems.26 

Relating information in a data warehouse allows analysis of information from all 
participating agencies in one database. Eaw enforcement can collaborate on cases and 
analyze information without jurisdictional boundaries. In addition, to information 
analysis, data warehouse systems nurture cross jurisdiction collaboration on solving cases 
(SEARCH, 2009, p. 5). Eigure 12 illustrates the data warehouse sources connected (or 
planned for the future) to RTIIS. 


26 Law enforcement agencies with the Department of Homeland Security and the Department of 
Justice are working on a program for information sharing between federal, state, local, and tribal agencies. 
Discussion about information sharing initiatives with other states and federal agencies is outside the scope 
of this thesis. 
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Figure 4; ItifoniMtion Sources Connected Through RTIIS 


Figure 12. Information resources connected through RTIIS (From SEARCH, 2009, p. 11) 


5. Los Angeles County Governance 

Figure 13 illustrates the Los Angeles County Sheriffs Department Organization. 
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Figure 13. Los Angeles County Sheriffs Department Organization Chart (From Los 

Angeles County Sherriff s Department, 2008) 

The Los Angeles County Regional Identifieation System (LACRIS) and the 
Ineident Reporting Information System (IRIS) is managed by the Los Angeles County 
Sheriffs Department (LASD). Oversight and funding for LACRIS is authorized by the 
Remote Aeeess Network Board (RAN) (LACRIS, n.d.). The RAN Board is ehaired by a 
member of the County Board of Supervisors. The remaining board members inelude law 
enforeement exeeutives. The board seeks and authorizes funding along with establishing 
the direction for the LACRIS systems. The RAN Board also supports a technical 
subcommittee that provides technology needs and recommends hardware and software. 
The Technical Subcommittee is chaired by the Sheriffs CAL-ID representative (Los 
Angeles County Records, n.d.). 
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Information sharing is managed by the Los Angeles Regional Integrated Law and 
Justiee Governanee Committee that ineludes LASD, LAPD, and three munieipal poliee 
departments partieipating in the RTIIS. The funetion of the governanee eommittee is to 
oversee law enforeement partieipation in information sharing. The prineiple method for 
partieipation ineludes memorandums of understanding (MOUs) between ageneies and the 
proeess to monitor eomplianee. The purpose of the agreements is to define partieipation 
guidelines and address issues sueh as data ownership and usage, eonfidentiality and 
liability, and indemnification (SEARCH, 2009, p. 8). The Governance Committee 
provides oversight to policies and use of technology through the MOU agreements. 

The California Department of Justice is leading a coordinating an effort to 
develop a statewide information sharing initiative. Both the LACRIS biometrics system 
and the IRIS information sharing system are included in the effort. The goal is to 
produce a strategic plan for the state (NGA Center, 2009, p. 11). 

Within Los Angeles County, the IRIS law enforcement information sharing 
program is leading the effort in regards to information sharing across all criminal justice 
agencies. Currently, many independent systems exist across the courts, prosecutors. 
Department of Corrections, probation, and other agencies. The only access is through the 
independent legacy systems. There is no effort under way for data sharing. However, 
IRIS is being considered for expanding information sharing across these agencies (C. 
Cahhal, personal communication, February 7, 2010). 

6. Los Angeles County Best Practices 

An assessment of lessons learned from the RTIIS information effort was 
conducted by SEARCH, the National Consortium of Justice Information and Statistics in 
2009. The lessons learned identified some key best practices. Establishing representative 
governance and partnerships from participating agencies is critical for any multiagency 
information sharing programs to succeed. An acceptable governance model must be put 
in place along with implementing formal information sharing agreements (SEARCH, 
2009, p. 16). 
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Leadership plays a signifieant part in implementing, funding, and gaining 
aeeeptanee. Leadership at the program level requires one ageney to take a leading role. 
The ageney must have the teehnieal expertise, business knowledge, and management 
experienee required for a multiageney program. Leaders must faeilitate deeision making 
aeross ageneies and advoeate the use of new systems and teehnologies at the highest 
levels of government (SEARCH, 2009, pp. 16-17). 

Sueeess is dependent on developing a eulture for information sharing by users of 
the system. Ageneies have different proeesses and systems and users need to be positive 
about adapting to new ways of doing business. Offieers and deputies must reeognize that 
they are part of a regional effort that benefits their ageneies as well as law enforeement 
aeross the region. Partieipating in training, round table diseussions, and eontributing 
sueeess stories that support the adoption of the program was sueeessful in building 
relationship networks aeross ageneies. In addition, using real eases for marketing efforts 
gained support from both government offieials as well as the publie (SEARCH, 2009, pp. 
16-17). 

The Los Angeles Regional Integrated Law and Justiee Governanee Committee 
eondueted Joint Applieation Requirements meetings with 13 law enforeement ageneies 
(Los Angeles Regional, 2005, p. 2). Early on in the proeess, the team identified that 
defining a phased approaeh for deliverables was a requirement. The best praetiee was to 
break the projeet up into meaningful and manageable phases. Eaeh phase must be long 
enough to provide business value and support aeoeptanee of the program but short 
enough to deliver quiek wins and build support for the program. Eaeh phase required 
managing user expeetations by developing a eentralized eommunieations plan. 
Information was provided that was eoneise, eonerete, and foeused on the “wins” (Eos 
Angeles Regional, 2005, pp. 30-32). In addition, the requirements ealled for establishing 
teehnology standards for information sharing that are eompatible with federal 
government standards (Eos Angeles Regional, 2005, p. 20). 
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7. Summary 


Los Angeles County Sheriffs Department supports a large eommunity that 
required the development of the LACRIS identilieation system to support the eounty’s 
law enforeement ageneies. For subjeets being booked into the eounty jail system, the 
proeess is similar to Minnesota with the exeeption that Los Angeles County has 
implemented an APIS system. At booking time, verifieation or ereation of biometrie 
identifiers oeeurs at the eounty level, state level, and the FBI level (FBIID). The eounty 
supports a three-tier biometrie identifieation proeess. Los Angeles County, also similar 
to Minnesota, relies on subjeet identifieation information provided by law enforeement 
reeord management systems (FBIID, SID, CID, name, and demographies) for 
information sharing. Subjeet eriminal reeords are dependent on the eounty, state, and 
federal biometrie identifiers. 

Los Angeles County provides seareh eapability aeross disparate law enforeement 
reeord management systems using the FBIID, SID, CID, name, and demographies. In 
eontrast, unlike Minnesota, the eounty does not provide a separate indexing and pointer 
system based on subjeet identifieation keys to the information. Searehing on a subject’s 
name and demographics is available but may not return the right results. 

Los Angeles County also provides law enforcement agencies the capability to use 
2-FID and facial image biometric identification using mobile devices in the field. Similar 
to Minnesota, the multi-modal devices do not store any information or create records. 
The units are used to verify identity and retrieve limited identification information. The 
subject’s FBIID, SID, CID, name, and demographics can be used to search through 
independent systems or used to search the IRIS data warehouse system. The IRIS system 
uses the subject’s biometric identification keys, name and demographics to link together 
subject criminal justice information across jurisdictions. Coplink does not currently 
provide any biometrics capability in the LASD system (L. Norton, personal 
communication, December 30, 2009). IRIS is dependent of the information provided by 
criminal justice agencies. 
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The multi-modal identification systems are limited to accessing the LASD 
identification system. Future plans will allow additional access to CAL-ID and the FBI’s 
Repository for Individuals of Special Concern System (L. Norton, personal 
communication, February 17, 2010). 

Criminal justice agencies have the responsibility to provide information to the 
IRIS system with the most accurate information possible. Agencies understand the only 
unique way to link a subjects to their records is through biometric identification used to 
establish local agency, county, state, and federal identifiers. Los Angeles County 
maintains criminal justice information in disparate systems, but is moving forward with a 
centralized data warehouse capability. 

C. WISCONSIN DEPARTMENT OF JUSTICE BIOMETRICS 

IDENTIFICATION AND INFORMATION SHARING 

I. Wisconsin Technology Framework Components and Elements 

Wisconsin’s biometrics identification program is the state’s Automated 
Fingerprint Identification System (AFIS) and the mobile fingerprint biometrics 
identification system (FAST-ID). Both systems provide subject identification capability 
to all agencies across the state. 

Similar to Minnesota, Wisconsin criminal justice agencies maintain and manage 
their own information. Information sharing capability is provided by the state’s 
Transaction Information for Management of Enforcement (TIME) system. The TIME 
system provides access to disparate systems across agencies and consolidates the 
information for presentation and reporting (Transaction Information, 2009). 

The Department of Justice, managed by the State Attorney General, provides 
oversight for both the biometric identification and information sharing capability. The 
Crime Information Bureau within the Department of Justice provides policy and 
technology support. Eigure 14 illustrates the Wisconsin’s Technology Eramework for 
subject identification and information sharing. 
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Figure 14. Wisconsin’s Technology Framework (Components and Elements) 

2. Wisconsin Department of Justice Fast ID 

Wisconsin has a population of 5.3 million residences living in 72 counties that 
cover 65,000 square miles (Wisconsin Department, 2002). The State Transaction 
Information for Management of Enforcement (TIME) system is being used by 625 
agencies that includes 580 traditional law enforcement agencies (two tribal), 16 federal 
agencies, 15 state agencies, and six other agencies associated with criminal justice 
support or technology services (Crime Information Bureau, 2008, p. 7). There are 
approximate 17,300 sworn officers providing public services (P. Collins, personal 
communication, February 22, 20lO).^^ 

The Wisconsin AFIS system operates similar to the Minnesota and Los Angeles 
County. Fingerprints of a subject are taken at the time of booking and checked against 
the state AFIS system and the FBI’s lAFIS system. Like other states, the Wisconsin state 


Officer count as per system billing information. 
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APIS system may submit a request to the FBFs lAFIS system for print verifieation; 
however, the FBFs system may rejeet the request based on the quality of the fingerprints 
and data submitted. Between January 1, 2009 and July 31, 2009 the FBI rejected 3.56 
percent of the submissions from the Wisconsin APIS system (Wisconsin criminal, 2009, 
p. 23). Wisconsin is similar to Minnesota in that the state supports a two-tier biometric 
identification process, one at the state level and one at the federal level. 

Wisconsin has implemented a 2-FID mobile biometrics identification capability 
called “Fast ID.” The system captures the index finger prints of a subject and searches 
the state APIS system. If a match in found, the state identifier (SID), subject’s 
demographics, and the local person identifier (LID) is returned to the requester. If no 
match is found, the system sends a “no match found” indicator. Fast ID does not store 
any biometric information (WDOJ, 2004, p. 2). This is similar to both the Los Angeles 
County Regional Identification System and the Minnesota CriMNet field officer 
identification system; however, there is an important difference; the Wisconsin APIS 
system does not store names. Therefore, the Fast ID system does not return the subjects 
name (WDOJ, 2004, p. 3). However, a project is underway to upgrade the state APIS 
system to include a subject’s name. When the project becomes operational, APIS will 
return the subject’s APIS master file record name back to the 2-FID requester (P. Collins, 
personal communication, February 22, 2010). 

If the Fast ID system returns the state identifier, the requestor will need to access 
the Wisconsin Transaction Information for Management of Enforcement (TIME) System 
using the state identifier to retrieve additional information. There is no relationship 
between the East ID system and the TIME system (P. Collins, personal communication, 
January 12, 2010). 
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3 . 


Wisconsin Transaction Information for Management of Enforcement 
System 


The TIME 28 system provides information sharing capability across law 
enforcement agencies. The system is similar to Minnesota’s system in that information is 
maintained by the agencies and the TIME system provides visibility across the disparate 
systems. However, the TIME system differs in that it does not use an index database to 
consolidate keys and create pointers to subject records (P. Collins, personal 
communication, January 12, 2010). 

In addition to serving the state and local law enforcement agencies with 
information sharing, the TIME system provides information from other data sources. The 
system accesses information from the Department of Transportation, Department of 
Corrections, and the Department of Resources. TIME also provides Minnesota with 
access into federal criminal information systems (C. Bauer, personal communication, 
December 7, 2009). In 2008, the TIME system processed over 74.5 million transactions 
(not include outside internet system access). In addition, 28 million of those transitions 
were subject searches (Crime Information Bureau, 2008, p. 52). The TIME system 
connects to approximately 9,600 criminal justice computers in Wisconsin and over 
400,000 computers located nationwide and in Canada. The system contains over 1.2 
million subjects arrest and disposition records (Crime Information Bureau, 2008, p. 2). 

4. Wisconsin Governance Model 

Governance for the APIS, Fast ID, and the TIME systems are the responsibility of 
the Crime Information Bureau (CIB). The Bureau is part of the Wisconsin Department of 
Justice (DOJ) that is managed by the State Attorney General. Figure 15 illustrates the 
Wisconsin Department of Justice Organization. 


28 Minnesota is implementing a replacement system for TIME called eTIME. For more information, 
see http://www.doj.state.wi.us/les/TIME/eTIME.htm for more information. 
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Figure 15. Wisconsin Department of Justice Organization Chart (From DOJ Organization 

Chart, n.d.) 

The Department of Justice provides the legal advice and support for agencies 
across the state. The department oversees the operations of the state’s legal services, 
criminal investigations, law enforcement systems and services, and crime victim services. 
Within the DOJ, the Division of Law Enforcement Services (DEES) provides the 
technology and services required by law enforcement agencies across the state. DEES is 
responsible for all systems central to state operations. In addition, DEES is responsible 
for law enforcement training and establishing operational standards (Agency Division, 
n.d.). 

The Crime Information Bureau (CIB) is a Division of Law Enforcement Services. 

CIB is responsible for the operation and management of the TIME system, the 
state’s Criminal History System, the Automated Identification Eingerprint System, and 
other state law enforcement systems (Law Enforcement Services, n.d.). 

State statutes 165.83(2)(a) and 165.84(1) determine when fingerprints are required 
for subjects contacted by law enforcement and taken into custody. The statues also give 
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the option to the Attorney General to define addition offenses that require fingerprinting. 
In addition, the statues finger-printable offenses exist for subjeets who have been issued 
summons or eitations. For any offenses requiring fingerprinting, statute 970.02(7) 
mandates fingerprinting must be eompleted before a subjeet appears before a judge 
(Wiseonsin Crime Information Bureau, 2010). Using the Fast-ID system is used by 
offieers in the field when an arrested person with an unknown or questioned proof of 
identifioation exists. Also, the system ean be used prior to entering errant arrest 
information into an ageney’s reeord management system (WDOJ, 2004, p.3). 

D. VERMONT DEPARTMENT OF PUBLIC SAFETY BIOMETRICS 

IDENTIFICATION AND INFORMATION SHARING 

I. Vermont Technology Framework Components and Elements 

Vermont’s biometries identifieation program is the state’s Automated Fingerprint 
fdentifieation System (AFfS). The state does not have a mobile biometries identifieation 
eapability. 

Vermont is similar to Minnesota and Wiseonsin. The state eriminal justiee 
ageneies maintain and manage their own information. Information sharing eapability is 
provided by the Vermont Justice Information Sharing System (VJISS). Within the VJISS 
system, there is a Law Enforcement Data Sharing Initiative (LEDSI) specific to law 
enforcement information sharing. Both the VJISS and EEDSI systems provide access to 
disparate systems across agencies and consolidate the information for presentation and 
reporting. 

VJISS is managed and governed by the Department of Public Safety with support 
from other state agencies. Governance includes both policy and technology. The 
Department of Public Safety facilitates meetings between the agencies for decision 
making. Eigure 16 illustrates Vermont’s Technology Eramework for subject identification 
and information sharing. 
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Figure 16. Vermont’s Technology Framework (Components and Elements) 


2. Vermont Justice Information Sharing System 

Vermont serves a population of 621,000 over 2,000 square miles (U.S. Census 
Bureau, 2008). The state has 51 municipal law enforcement agencies, 14 Sherriffs 
Departments, and the Vermont State Police (Vermont Department, 2008). The state has a 
unified court system, statewide corrections system, police record management systems,^^ 
centralized states attorneys, and a common shared network (VJISS Strategic Plan, 2009, 

p. 1). 

The Vermont Justice Information Sharing System (VJISS) is an ongoing program 
to provide information sharing capability across criminal justice agencies in Vermont. 

VJISS is managed and governed by the Department of Public Safety, State 
Attorneys and Sheriffs, Department of Motor Vehicle, Department of Corrections, Court 


29 Ninety-three pereent of the police record management systems are provided by the same vendor 
(Aumand, 2008a p. 1). 
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Administrators Office, and the Defender General Office. Governance ineludes both 
poliey and teehnology. The Department of Publie Safety faeilitates meetings and 
aetivities (VJISS Strategie Plan, 2009, p. 1). 

Vermont law enforeement ageney offieers do not have the eapability to use 
biometries identifieation in the field. Subjeet biometrie identifieation only oeeurs during 
the subject booking process. However, law enforeement agencies partieipate in the 
VJISS information sharing program (F. Aumand III, personal eommunieation, February 
11 , 2010 ). 

The Law Enforeement Data Sharing Initiative (LED SI) is a program within the 
VJISS program. Representatives from law enforeement ageneies are responsible for 
implementing information sharing between law enforeement systems. In addition, the 
LEDSI representatives work with other ageneies within VJISS to develop information 
sharing eapability between other eriminal justiee ageneies. (VJISS Strategic Plan, 2009, 

p. 1). 

The VJISS system provides two eapabilities for law enforeement ageneies. Eirst 
the system will allow searehing poliee ageney systems based on a subjeets name, vehiele 
information, and ageney ineidents (ineluding ineident number). The system searehes 
through the disparate systems based on the user request and returns eonsolidated 
information.30 The system does not store any information. Seeond, there is a separate 
server and database that eaptures subjeets’ names, vehiele identifieation information, and 
ageney ineidents (ineluding ineident number). The system delivers analysis eapability for 
information provided by the law enforeement disparate systems. This system will have 
restrieted role based usage, limited aeeess, and regularly audited (Privaey Poliey, 2008, p. 
3). 


30 This type of search is sometimes called a federated query. 
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3. 


Vermont Best Practices 


a. Privacy Impact Assessment and Privacy Policy 

The Vermont LEDSI program eompleted a publie impact assessment in 
2008. The impact assessment is an excellent example analyzing information from a 
questionnaire to establish guidelines for developing policies that meet privacy concerns. 
Every state will have similar questions, but answers will vary. Eor the purpose of this 
thesis, this researcher examined the Vermont VJISS Privacy Impact Assessment and the 
established Vermont VJISS Privacy Policy.The intent is to show the importance of an 
assessment and policy necessary for the technology framework, not to develop a deep 
understanding of privacy issues and policies. The impact assessment included the 
following questions that the VJISS program had to address: 

• Information 

• What information will be collected and stored? 

• Prom whom is the information collected? 

• What privacy risks exist and how will they be mitigated? 

• Purpose 

• Why is the information being collected? 

• What legal authorities, arrangements, agreements authorize the 
collection and use of the information? 

• What privacy risks exist and how will the risks be mitigated? 

• System use 

• How, when, and by whom will the system be used? 

• Will the system analyze the information? 

• How will the results be used and distributed? 

• Who has responsibility for information accuracy? 

• How long will the information be retained? 

• Information sharing and disclosure 

31 Privacy policy is a legally binding notice of how an agency handles an information contributor’s 
personal data. The privacy policy should contain details about collecting information and secondary uses of 
data, including how information is shared with third parties and who those third parties are (U.S. 
Department of Justice, 2008, p.l). 
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• What agencies will be authorized to share information? 

• What information will be made available within each agency? 

• How will the information be transmitted or disclosed? 

• What privacy risks exist and how will they be mitigated? 

• Technical access and security 

• What user groups will have access to the system? 

• Will contractors be allowed to have access? 

• Does the system use “roles” to assign access privileges? 

• How and who will provide access administration? 

• How will access assignments be verified? 

• What security policies, audit measures, and technical safeguards be 
implemented? 

• What privacy risks exist and how will they be mitigated? (Aumand, 
2008a, pp. 3-8). 

The privacy assessment was used to develop the VJISS privacy policy. 
The Vermont Privacy policy details specific requirements that address privacy concerns. 
The following outlines information included in the Vermont VJISS Privacy Policy: 

• VJISS purpose and benefits 

• Compliance with privacy and civil rights laws (state and federal) 

• Agency transparency and accountability 

• Definition of the system 

• Operational policies 

• Seeking and retaining information 

• Information usage, validity, reliability 

• Information classification based on limitations, access and disclosure 
restrictions 

• Information collation and analysis 

• Public access to information, usage, and change management 

• Accountability of activities 

• Enforcement of policies 

• Agency agreements 

• Training (Aumand, 2008b, pp. 2-17). 
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V. FINDINGS 


A. ARIZONA PROPOSED TECHNOLOGY FRAMEWORK FOR LAW 
ENFORCEMENT IDENTIFICATION AND INFORMATION SHARING 


This researcher found similarities in the technology framework across the states 
researched. In each state, success depended on three primary components, subject 
identification and linkage to criminal justice records, information sharing with visibility 
across jurisdictions, and governance to support policy and technology requirements. Each 
component recognizes the important in maintaining information security and establishing 
privacy policies. Figure 17 illustrates the proposed Arizona technology framework for 
subject identification and information sharing based on leveraging current programs 
within the state and similarities across the researched states. 
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Figure 17. Arizona’s Proposed Technology Framework (Components and Elements) 
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1. 


Subject Identification Comparative Analysis 


This researcher found that each state follows the same guidelines for creating 
subject biometric identifiers. The only time subject biometric identifiers are created is 
during the jail booking process. In addition, during the booking process is the only time a 
state can request the FBI to create a federal subject identifier (FBIID). Arizona follows 
the same processes as the states researched. The only variation to this process is in Los 
Angeles County. The Los Angeles County Sheriffs Department creates a county subject 
biometric identifier (CID) in addition to a SID and an FBIID. 

Minnesota and Wisconsin law enforcement and criminal justice agencies use 
wireless mobile biometric identification systems to validate a subject’s identity against 
the state’s biometric identification system. Wireless mobile identification systems are 
under review in Arizona, but not currently being deployed. Los Angeles County has also 
deployed mobile wireless capability within the county. The system validates a subject’s 
identity against the county biometric identification system. The county has plans to 
integrate with the state’s biometric identification system in the near future. Vermont has 
not deployed a mobile identification capability. Minnesota is the only state (as part of 
this research) that is the process of extending the mobile identification capability to 
validate subjects against the federal RISC system (currently, the results only go back to 
the state AFIS system and not to the field mobile units (C. Rhoades, personal 
communication, February 19, 2010). These systems do not store or create biometric 
identifiers; the systems are only used to validate identity. 

2. Information Sharing Comparative Analysis 

In each of the states researched, there is a struggle between maintaining agency 
independence and the need to integrate information for the good of the states and the 
nation. Some states believe information should be maintained and managed at the local 
agency level with controlled access for information sharing at the primary source; 
information is provided through a distributed access capability. Other states believe 
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maintaining and managing information is also the responsibility of the loeal ageney, but 
information ean be eontributed to a repository for other ageneies to use under a eontrolled 
data usage agreement. 

Minnesota supports a eounty and state approaeh to indexing subjeet identifiers 
that point to distributed disparate eriminal justiee information systems. The indexing 
system is unique in that it also supports traeking subjeet events as the eriminal moves 
through the justiee system. A state system is used to aeeess the primary sourees of 
information that remain under the eontrol of eaeh ageney. 

The Los Angeles County Sheriffs Department supports information sharing using 
a eentralized data warehouse approaeh. Eaeh ageney eontributes eriminal justiee 
information to a eentral repository for the benefit of other organizations. This is a shift in 
eultural thinking. Primary ageney information still resides with the loeal ageney, but the 
information is now released to be used by other ageneies. Agreements are eritieal to 
eontrolling how the information will be used in order to proteet the ageneies interests. 

Wiseonsin and Vermont use a distributed information sharing approaeh similar to 
Minnesota; however, Wiseonsin and Vermont do not provide an integrated indexing 
pointer system. Both states provide a system to their respeetive ageneies to aeeess 
information from disparate ageney systems. Wiseonsin and Vermont support ageney 
eontrol of their own information. 

Arizona supports a eentralized information sharing approaeh similar to Los 
Angeles County. However, some eounties have deployed new systems that aeeess 
disparate ageney systems. Integrating the two eoneepts will be a ehallenge for 
information sharing aeross the state. 

Regardless if a state uses a distributed or eentralized approaeh to information 
sharing, aeeess to the right information and aeeurate information at the right time is 
eritieal for law enforeement and eriminal justiee ageneies.32 With the availability of 


32 The National Consortium for Justice Information and Statistics compared the advantages and 
disadvantages to information sharing using centralized, distributed, or indexed approaches (SEARCH, 
2008, p.27). 
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larger sets of subjeet information, aeeurate retrieval of all pertinent subject information 
becomes a necessity. Visibility to the right information is dependent on validated 
biometric subject identifiers. As stated earlier, using a subject’s name and demographics 
are not acceptable in a large information sharing environment. The Verify Identify 
Pyramid (VIP) in Figure 18 illustrates how combining biometric identification keys 
(federal, state, county, and local) can yield accurate access for subject information across 
a vast amount of available information. 
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3 . 


Governance Comparative Analysis 


This researcher analyzed the governance structures in Minnesota, Wisconsin, 
Vermont, and Los Angeles County. The focus was to identify the organizational 
structure along with roles and responsibilities necessary to support both policy and 
technology requirements. 

Minnesota and Wisconsin have a governance structure at a high level within each 
state. Both states established governance structures in three areas. First, leadership at the 
highest level necessary to establish direction, create or change polices that impact 
statutes, and deliver funding sources through legislative action. Both states created state 
policy groups and technology groups required to implement systems. Minnesota differs 
from Wisconsin in that governance ultimately falls under the responsibility of the 
Department of Public Safety and then to the governor. Governance in Wisconsin is the 
responsibility of the Department of Justice headed by the Attorney General. This 
researcher believes the reporting structure has disadvantages and advantages in both 
scenarios. Governance under the Department of Public Safety leans towards the 
influence of the Governor and the State political structure. Governance under the 
Department of Justice and the Attorney General leans towards the influence of federal 
and state law enforcement along with the judicial systems. However, further research 
would need to be conducted to validate advantages and disadvantages. 

Vermont governance consists of a consortium of members from the Department 
of Public Safety, State Attorneys and Sheriffs, Department of Motor Vehicle, 
Department of Corrections, Court Administrators Office, and the Defender General 
Office. The consortium provides policy and technical resources when requested. The 
Department of Public Safety facilitates meeting and activities. The state identification 
system is funded as part of the Department of Public Safety budget. Vermont is seeking 
funding for the Justice information sharing system. 

Los Angels County identification and information sharing systems are governed 
at the county level. Leadership is provided by county executives and law enforcement 
leaders. It should be noted that approximately 27 percent of California residents reside in 
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the county. If the county were to be considered as a state, it would have the nineteenth 
largest economy in the world (About L.A. County, n.d.). The county works with state to 
lead many criminal justice programs. The Los Angeles County Sheriffs Department 
oversees both the biometric identification systems and the information sharing programs. 
Funding for the biometrics identification program is supported by the state through fines, 
penalties, and a dollar fee on all registered vehicles in the county (L. Norton, personal 
communication, November 3, 2010). Funding for the county information sharing 
program is funded by the Los Angeles County Sheriffs Department and the Los Angeles 
Police Department. The expectation is that a distributed cost model will be put in place 
for participating agencies (C. Cahhal, personal communication, February 7, 2010). 

Arizona identification systems are managed by the Department of Public Safety. 
Funding is supported by the department’s budget as part of the state’s revenue plan 
(Department of Public Safety, 2009, p. 354). The AZLink information sharing program is 
managed by the Arizona Criminal Justice Commission. Governance is provided by law 
enforcement regional representatives. The commission facilitates sessions for decision 
making with both a state policy team and technology team. 33 Direction and support is 
provided the commissioners (ACJC, 2010). 

The following matrix illustrates the relationship between the state technology 
framework components (Table 2). 


Table 2. Technology Framework Component Comparison 


state 

Biometric Identification 

Information Sharing Governance 


Creation 

Verification 

Mobile 

Identification 
Systems Available 

Reporting Structure 

Minnesota State Level (1) State Level 

Los Angeles County Sheriff's Oepartmei State (1) and County LeveCounty Level (2) 

Ye»(3| 

Yes 

Distributed & Indexed 
Centralized 

Department of Public Safety 

Los Angeles County Sheriffs Department 

WiKonsin 

State Level (1) 

Stale Level 

Yes 

Distributed 

Department of Justice. Attorney General 

Vermont 

State Level (1) 

Stale Level 

No 

Distributed 

Department of Public Safety 

Arizona 

Stale Level 

Slate Level 

No 

Department of Public Safety Identification 

Arizona Criminal Justice Commission Information 
Centralized & Distributee Sharing 







Notes: 







(1) Slate Biometric Systems link to the FBI's Identification system and request federal biometrics identifiers 

(2) Los Angeles County SherifTs Department veriftes mobile identification requests against the County system. Plans are under way to extend verification to the State system 

(3) Minnesota has also extended mobile biometrics identification verification to the federal Repository for Individuals of Special Concern {RISC) 


33 The AZLink program is the responsibility of the author of this thesis. 
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4. Technology Framework Best Practice 


The following best praetiees were derived from the researeh information provided 
by Minnesota, Los Angeles County Sheriffs Department, Wiseonsin, and Vermont and 
are eaptured in the information found in this thesis. 

Teehnology Framework Identification Best Practices: 

• Subject identifiers should be based on biometric identification technology. 

• Verification of identity is based on biometrics not subjects names and 
demographics. 

• All subjects’ names are considered abases. 

• Criminal justice agencies should use biometric identification to verify 
identities and establish local record system identifiers. 

• Identification protocol for mobile biometrics identification should be 
defined by state statutes. 

• Integrated biometrics identification verification should include the FBI’s 
RISC system. 

• Federal, state, county, and local identifiers should be accurate, stored 
within local criminal justice systems and verified using biometric 
technology. 

a. Technology Framework Information Sharing Best Practices 

• Criminal justice information is stored, shared, and retrieved by biometric 
generated subject identifiers. 

• Agencies must adherence to state and federal privacy laws. 

• Collect information once and share many times. 

• Local agency information must be accurate to support information sharing 
across agencies. 

• Development of organizational, process, data, technology, and 
motivational models must use a cross discipline approach. 

• Establish an environment for cultural change. 

• Establish round table discussions at the lowest level to build relationship 
networks across agencies. 

• Build partnerships across jurisdictions. 
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• Create a shared training and communieations capability across 
jurisdictions. 

• Implement technology standards that align with federal initiatives. 

• Establish memorandums of understanding between local, state, and federal 
partners. 

• Information should be accessible without jurisdictional boundaries. 

b. Technology Framework Governance Best Practices 

• State statutes should define organizations and their responsibilities. 

• Executive commitment is required for setting direction, establishing 
funding, and allocating resources. 

• Governance should include legislative champions. 

• Eeadership plays a significant part in implementing, funding and gaining 
acceptance. 

• Eeadership must facilitate decision making, across agencies and be 
advocates at the highest levels of government. 

• Use real case success stories for marketing. 

• Data practices for usage of criminal justice information should be defined 
by state statutes. 

• Complete a privacy impact assessment and a privacy policy. 

• Governance membership must have cross agency participation. 

• Governance includes oversight and support for both policy and 
technology. 

• Programs and projects should be defined in a phased approach. The best 
practice is to break the project up into meaningful and manageable phases. 
Each phase must be long enough to provide business value and support 
acceptance of the program, but short enough to deliver quick wins and 
build support for the program. 
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VI. CONCLUSIONS 


A. THE TRAGIC LOSS OF A LAW ENFORCEMENT OFFICER 

In 2006, Officer Nick Erfle of the Phoenix Police Department was shot and killed 
by a subject stopped and questioned by the officer for jaywalking. If information sharing 
had been available between Arizona law enforcement agencies and federal agencies this 
tragedy most likely would have been avoided. 

The subject was an illegal immigrant who had a lengthy criminal history record. 
In 2006, the subject was deported based on a felony conviction for theft. The subject was 
issued an outstanding deportation order 34 and would face criminal charges if he re¬ 
entered the country. The subject re-entered the country and was arrested again two 
months later. 

The Scottsdale Police Department arrested the subject in May of 2006 for 
grabbing his girlfriend’s arm twice during a quarrel. Scottsdale officers only had local 
information and released the subject when he posted bond. If the Scottsdale Police 
Department had known the subject had an outstanding deportation order, he would have 
been jailed and federal criminal charges filed. A conviction could have earned him up to 
20 years in prison; however, more importantly the subject would have not been released 
to commit the tragic shooting of Officer Nick Erfle (Villa, 2007). Although there is no 
guarantee the Scottsdale Police would have checked information through an integrated 
system, the opportunity would have presented itself based on the ease of use versus the 
manual efforts used today to find the information. 

B. ARIZONA STRATEGIC PLAN 2012 RECOMMENDATIONS 

The Arizona Criminal Justice Commission will be updating the 2008 Arizona 
Integrated Criminal Justice Information System Strategic Plan in 2012. This researcher 


34 Subjects who re-enter the county with an outstanding deportation order face federal criminal 
charges and are subject have penalties and jail time when convicted. 
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recommends using the technology framework discussed in this thesis as a guideline for 
taking the next steps. The technology framework offers suggestions for improvement 
based on other states efforts in the areas of implementation of biometric identification for 
criminal justice agencies, integration of identification capability with law enforcement 
information sharing systems, and establishing a governance structure necessary to 
support policy requirements and new technology solutions. 

C. TECHNOLOGY FRAMEWORK LIMITATIONS 

The technology framework provided in this thesis was founded on practical 
implementations in Minnesota; Los Angeles County, California; Wisconsin; and 
Vermont. Even though each implementation was designed to meet state requirements, 
there were similarities in regards to how technology is being used, governance oversight, 
and recommended best practices. Many states and regions are currently implementing 
law enforcement biometric identification systems and cross jurisdictional criminal justice 
information sharing programs. There is no one solution that fits all implementations. 
This researcher would like to see the technology framework enhanced by exploring 
additional states and their solutions. 

D. ARIZONA STRATEGIC PLAN—BIOMETRIC IDENTIFICATION 

LIMITATIONS AND POSSIBILITIES 

The 2008 Arizona Strategic Plan calls for utilizing unique identification to link 
together non-arrest events and formal arrest events with jail booking events. In addition, 
law enforcement agencies need to expand identification capabilities beyond known 
criminals. 

The analysis in this thesis indicates that prior to booking a subject, law 
enforcement agencies only use biometric identification systems to verify identification 
against existing criminal records located in the state APIS system. Law enforcement 
agencies do not create biometric identifiers. The only time a new biometric record is 
created is when a subject is booked into the jail system (creating a criminal record). Law 
enforcement agencies are dependent on the state to provide subject identifiers (SID, 
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FBIID) for their record management systems. For non-criminal identification, law 
enforcement agencies continue to create records and use information based on a subject’s 
name and demographics. In addition, the systems are independent and require manual 
efforts to link subject information together for investigations and processing court cases. 
The information in this thesis shows using a subject’s name and demographics as 
identifiers for criminal justice records is unreliable. The only true subject identification is 
based on biometric identification. 

The possibility exists to use mobile biometric technology to generate a Non- 
Criminal Subject Identifier (NCID) at first point of authorized contact. The new 
identifier would be used as a subject identifier in all law enforcement record management 
systems across the state. The NCID would be maintained by the state (similar to the 
current state AFIS system) and distribute the NCID to law enforcement officers during 
the subject’s biometric validation process. Having a NCID capability would provide a 
link between independent systems to retrieve information using automated solutions for 
non-criminal offenders. In addition, if a subject is booked into jail, a link between a State 
Identifier (SID), the FBI’s Identifier (FBIID) and the NCID could provide a complete 
picture of a subject’s involvement with the criminal justice system. This would include 
being able to automatically retrieve subject information stored in law enforcement 
systems prior to arrest and booking. 

In addition to biometric fingerprint identifiers, possibilities exist to include facial 
image identifiers. Facial recognition systems are being implemented by the Arizona 
Counter Terrorism Information Center. Using facial recognition technology would 
follow the same process that creates a SID. A facial image would generate a State Facial 
Identifier (SFID). The SFID would be created from jail booking mugshot photos, law 
enforcement photos, and state driver’s license photos for subjects with a criminal record. 
The additional SFID along with the SID will add an optional way to retrieve criminal 
record information and provide another validation capability to insure subject verification 
accuracy. 
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1. 


Future Research—Biometric Identification 


Creating biometric identification capability used to store non-criminal subject 
information is a sensitive issue for the American public. This thesis has shown Arizona, 
along with other states, has rejected the National REAL-ID program. Concern exists in 
regards to how the information will be used, possibility of identity theft, and the security 
of personal information. For Arizona, further research will need to be done to determine 
if there are any acceptable conditions in which the Arizona state legislature will change 
their view in using and maintaining biometric identification information for non-criminal 
offenders. Restricting the use of the information to law enforcement does offer some 
possibilities. This researcher believes facial image recognition for non-criminal subjects 
will be unacceptable for the foreseeable future. 

E. ARIZONA STRATEGIC PLAN—LAW ENFORCEMENT 

INFORMATION SHARING 

Arizona is moving away from a centralized access capability across disparate law 
enforcement systems. The AZLink program using Coplink will provide integrated 
analysis and data access capability across the state. The information sharing environment 
will be similar to Los Angeles County, California. 

The analysis of Minnesota, Los Angeles County, California, and Wisconsin 
showed there is no relationship between biometric identification systems and the 
information sharing systems. The Arizona Tucson Police Department is now piloting a 
program using new facial recognition technology included in the Coplink system (R. 
Fund, personal communication, August 18, 2009). The software allows input of images 
and creates biometric identification keys integrated into a pointer system. The system 
points to subject records located in the central repository. A requester can use a scanned 
image to request subject information. 

This researcher would like to note that Arizona is participating with other states 

(including Los Angeles County, California) in information sharing across state borders. 

In addition, pilot programs are underway to share information with the U.S. Department 

of Justice and the U.S. Department of Homeland Security. However, information sharing 
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outside the state and with federal ageneies is not ineluded in this thesis. An excellent 
thesis would expand on the materials presented here and research information sharing 
across state borders and with federal agencies. 

1. Future Research—Biometric Identification Integrated with 
Information Sharing Systems 

The integration of facial recognition technology with information sharing systems 
links together two different law enforcement business practices. The capability is new 
and requires additional research in governance, policies, and procedures. The 
recommendation is to analyze other states using the same capability. In addition, the 
analysis would provide benefit to the technology framework developed in this thesis. 

F. ARIZONA STRATEGIC PLAN—ALIGNMENT WITH FEDERAL AND 

STATE SYSTEMS LIMITATIONS AND POSSIBILITIES 

The 2008 Arizona Integrated Criminal Justice Information System Strategic Plan 
identified a requirement to integrate with federal information sharing capabilities. The 
2012 strategic planning process will consider integration with the FBI’s program that 
delivers fast biometric identification capability against a Repository for Individuals of 
Special Concern. The RISC system is under development with pilot programs located at 
the Ohio Bureau of Criminal Identification and Investigation, Florida Department of Law 
Enforcement, Texas Department of Public Safety, and the Minnesota Bureau of Criminal 
Apprehension (as noted in the analysis) (C. Rhoades, personal communication, February 
19, 2010). 

I. Future Research—Biometric Identification Integrated with Federal 
and Border State Initiatives 

The FBI is working with Central American countries to collect and store 
biometric information. The FBI plans to deliver information sharing capability to both 
federal and state law enforcement agencies. No single system exists that delivers both 
federal and state information to law enforcement officers in the field. The goal is to stop 
criminals at the first point of contact, regardless if it is along the border or within cities. 
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In parallel, Arizona, California, New Mexieo, and Texas governors have been 
holding border conferences with Mexico since 2006. The objective of the conferences is 
to develop partnership programs to improve border security and reduce crime. Several 
programs support criminal information sharing. Table 3 illustrates the automated 
identification systems in Central America. 

Table 3. Central American Countries Identification Systems Comparative Matrix 

(From McNicholas, 2009) 
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System 

Firearms Permit 
System 






Panama 

A-V 

A-V 

A-V 

A-V 

Honduras 

A-V 


A-V 

A-V 

Ei Saivador 

A-V 

A-V 

A 

A 

Guatemaia 

A (2011) 




Mexico 

A (2012) 




L 






Automated System 

(includes prints and facial Images) 


|V 

Identification verified against a national identification system 


Paper based system (may contain prints or facial images) | 


The comparative matrix summarized from the Biometrics Baseline for Central 
America Final Report 2009 35 

Further research will be necessary to determine the feasibility of integrating 
identification capability. The benefit would be enormous for the states that border with 
Mexico (Arizona, California, New Mexico, and Texas).36 

G. ARIZONA STRATEGIC PLAN—EXPAND AND INTEGRATE 

GOVERNANCE 

The Arizona Department of Public Safety governs the biometrics identification 
systems. The Arizona Criminal Justice Commission provides oversight to the state law 
enforcement information sharing program (AZLink). Since the adoption of the Arizona 


35 Central American countries include El Salvador, Honduras, Guatemala, Panama, and Mexico. 

3^ Further information on this can be found in the unpublished paper Central America Identification 
Information Sharing with Local Law Enforcement Agencies (Kalaf, 2009). 
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Integrated Criminal Justice Information System Strategic Plan in 2008, four regional 
information centers have been established that support the Coplink central repository. A 
governance committee has been established to provide guidance to both the 
commission’s policy and technical teams. 

The recommendation will be to create a formal governance team that includes 
both a policy board and a technical board at the highest level within Arizona. This thesis 
provided two possible alternatives. First, create a formal governance program under the 
direction of the Arizona Department of Public Safety, similar to Minnesota. Second, 
create a formal governance program under the direction of the Arizona Attorney General, 
similar to Wisconsin. Both options have positive and negative impact to the state. 

However, the technology framework outlines the responsibilities of the 
governance team. The 2012 strategic planning effort should include the 

recommendations and determine the best solution. This researcher recommends the state 
legislature create statues that formalize a governance structure, responsibilities, and 
funding. 
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